@node9/proxy 1.10.2 → 1.10.3

package/dist/cli.js

@@ -168,8 +168,8 @@ function sanitizeConfig(raw) {
     }
   }
   const lines = result.error.issues.map((issue) => {
-    const path35 = issue.path.length > 0 ? issue.path.join(".") : "root";
-    return `  \u2022 ${path35}: ${issue.message}`;
+    const path39 = issue.path.length > 0 ? issue.path.join(".") : "root";
+    return `  \u2022 ${path39}: ${issue.message}`;
   });
   return {
     sanitized,
@@ -254,7 +254,8 @@ var init_config_schema = __esm({
         enableTrustSessions: import_zod.z.boolean().optional(),
         allowGlobalPause: import_zod.z.boolean().optional(),
         auditHashArgs: import_zod.z.boolean().optional(),
-        agentPolicy: import_zod.z.enum(["require_approval", "block_on_rules"]).optional()
+        agentPolicy: import_zod.z.enum(["require_approval", "block_on_rules"]).optional(),
+        cloudSyncIntervalHours: import_zod.z.number().positive().optional()
       }).optional(),
       policy: import_zod.z.object({
         sandboxPaths: import_zod.z.array(import_zod.z.string()).optional(),
@@ -514,11 +515,11 @@ function getGlobalSettings() {
   };
 }
 function getCredentials() {
-  const DEFAULT_API_URL = "https://api.node9.ai/api/v1/intercept";
+  const DEFAULT_API_URL2 = "https://api.node9.ai/api/v1/intercept";
   if (process.env.NODE9_API_KEY) {
     return {
       apiKey: process.env.NODE9_API_KEY,
-      apiUrl: process.env.NODE9_API_URL || DEFAULT_API_URL
+      apiUrl: process.env.NODE9_API_URL || DEFAULT_API_URL2
     };
   }
   try {
@@ -530,13 +531,13 @@ function getCredentials() {
       if (profile?.apiKey) {
         return {
           apiKey: profile.apiKey,
-          apiUrl: profile.apiUrl || DEFAULT_API_URL
+          apiUrl: profile.apiUrl || DEFAULT_API_URL2
         };
       }
       if (creds.apiKey) {
         return {
           apiKey: creds.apiKey,
-          apiUrl: creds.apiUrl || DEFAULT_API_URL
+          apiUrl: creds.apiUrl || DEFAULT_API_URL2
         };
       }
     }
@@ -587,6 +588,8 @@ function getConfig(cwd) {
     if (s.approvalTimeoutSeconds !== void 0 && s.approvalTimeoutMs === void 0)
       mergedSettings.approvalTimeoutMs = s.approvalTimeoutSeconds * 1e3;
     if (s.environment !== void 0) mergedSettings.environment = s.environment;
+    if (s.cloudSyncIntervalHours !== void 0)
+      mergedSettings.cloudSyncIntervalHours = s.cloudSyncIntervalHours;
     if (s.hud !== void 0) mergedSettings.hud = { ...mergedSettings.hud, ...s.hud };
     if (p.sandboxPaths) mergedPolicy.sandboxPaths.push(...p.sandboxPaths);
     if (p.ignoredTools) mergedPolicy.ignoredTools.push(...p.ignoredTools);
@@ -596,7 +599,12 @@ function getConfig(cwd) {
     if (p.smartRules) {
       const defaultBlocks = mergedPolicy.smartRules.filter((r) => r.verdict === "block");
       const defaultNonBlocks = mergedPolicy.smartRules.filter((r) => r.verdict !== "block");
-      mergedPolicy.smartRules = [...defaultBlocks, ...p.smartRules, ...defaultNonBlocks];
+      const userRuleNames = new Set(p.smartRules.filter((r) => r.name).map((r) => r.name));
+      const filteredBlocks = defaultBlocks.filter((r) => !r.name || !userRuleNames.has(r.name));
+      const filteredNonBlocks = defaultNonBlocks.filter(
+        (r) => !r.name || !userRuleNames.has(r.name)
+      );
+      mergedPolicy.smartRules = [...filteredBlocks, ...p.smartRules, ...filteredNonBlocks];
     }
     if (p.snapshot) {
       const s2 = p.snapshot;
@@ -630,6 +638,16 @@ function getConfig(cwd) {
   };
   applyLayer(globalConfig);
   applyLayer(projectConfig);
+  {
+    const cacheFile = import_path3.default.join(import_os3.default.homedir(), ".node9", "rules-cache.json");
+    try {
+      const raw = JSON.parse(import_fs3.default.readFileSync(cacheFile, "utf-8"));
+      if (Array.isArray(raw.rules) && raw.rules.length > 0) {
+        applyLayer({ policy: { smartRules: raw.rules } });
+      }
+    } catch {
+    }
+  }
   const shieldOverrides = readShieldOverrides();
   for (const shieldName of readActiveShields()) {
     const shield = getShield(shieldName);
@@ -748,7 +766,8 @@ var init_config = __esm({
         // 120-second auto-deny timeout
         flightRecorder: true,
         auditHashArgs: true,
-        approvers: { native: true, browser: true, cloud: false, terminal: true }
+        approvers: { native: true, browser: true, cloud: false, terminal: true },
+        cloudSyncIntervalHours: 5
       },
       policy: {
         sandboxPaths: ["/tmp/**", "**/sandbox/**", "**/test-results/**"],
@@ -1727,9 +1746,9 @@ function matchesPattern(text, patterns) {
   const withoutDotSlash = text.replace(/^\.\//, "");
   return isMatch(withoutDotSlash) || isMatch(`./${withoutDotSlash}`);
 }
-function getNestedValue(obj, path35) {
+function getNestedValue(obj, path39) {
   if (!obj || typeof obj !== "object") return null;
-  return path35.split(".").reduce((prev, curr) => prev?.[curr], obj);
+  return path39.split(".").reduce((prev, curr) => prev?.[curr], obj);
 }
 function shouldSnapshot(toolName, args, config) {
   if (!config.settings.enableUndo) return false;
@@ -2204,8 +2223,8 @@ async function explainPolicy(toolName, args) {
       const flattenedArgs = JSON.stringify(args).toLowerCase();
       const extraTokens = flattenedArgs.split(/[^a-zA-Z0-9]+/).filter((t) => t.length > 1);
       allTokens.push(...extraTokens);
-      const preview = extraTokens.slice(0, 8).join(", ") + (extraTokens.length > 8 ? "\u2026" : "");
-      detail += ` + deep scan of args: [${preview}]`;
+      const preview2 = extraTokens.slice(0, 8).join(", ") + (extraTokens.length > 8 ? "\u2026" : "");
+      detail += ` + deep scan of args: [${preview2}]`;
     }
     steps.push({ name: "Input parsing", outcome: "checked", detail });
   }
@@ -2469,8 +2488,8 @@ function isDaemonRunning() {
     if (port !== DAEMON_PORT) {
       return false;
     }
-    const MAX_PID = 4194304;
-    if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0 || pid > MAX_PID) {
+    const MAX_PID2 = 4194304;
+    if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0 || pid > MAX_PID2) {
       return false;
     }
     try {
@@ -6266,9 +6285,146 @@ var init_costSync = __esm({
   }
 });
 
+// src/daemon/sync.ts
+function readCredentials() {
+  if (process.env.NODE9_API_KEY) {
+    return {
+      apiKey: process.env.NODE9_API_KEY,
+      apiUrl: process.env.NODE9_API_URL ?? DEFAULT_API_URL
+    };
+  }
+  try {
+    const credPath = import_path20.default.join(import_os15.default.homedir(), ".node9", "credentials.json");
+    const creds = JSON.parse(import_fs17.default.readFileSync(credPath, "utf-8"));
+    const profileName = process.env.NODE9_PROFILE ?? "default";
+    const profile = creds[profileName];
+    if (typeof profile?.apiKey === "string" && profile.apiKey.length > 0) {
+      return {
+        apiKey: profile.apiKey,
+        apiUrl: typeof profile.apiUrl === "string" ? profile.apiUrl.replace(/\/intercept$/, "/policy") : DEFAULT_API_URL
+      };
+    }
+    if (typeof creds.apiKey === "string" && creds.apiKey.length > 0) {
+      return { apiKey: creds.apiKey, apiUrl: DEFAULT_API_URL };
+    }
+  } catch {
+  }
+  return null;
+}
+function fetchCloudRules(apiKey, apiUrl) {
+  const parsed = new URL(apiUrl);
+  return new Promise((resolve, reject) => {
+    const req = import_https.default.request(
+      {
+        hostname: parsed.hostname,
+        port: parsed.port ? parseInt(parsed.port, 10) : void 0,
+        path: parsed.pathname + parsed.search,
+        method: "GET",
+        headers: {
+          Authorization: `Bearer ${apiKey}`,
+          "Content-Type": "application/json"
+        },
+        timeout: 1e4
+      },
+      (res) => {
+        const chunks = [];
+        res.on("data", (chunk) => chunks.push(chunk));
+        res.on("end", () => {
+          if (res.statusCode !== 200) {
+            reject(new Error(`API returned ${res.statusCode ?? "unknown"}`));
+            return;
+          }
+          try {
+            const body = JSON.parse(Buffer.concat(chunks).toString("utf-8"));
+            const rules = Array.isArray(body) ? body : Array.isArray(body.rules) ? body.rules : [];
+            resolve(rules);
+          } catch (e) {
+            reject(e);
+          }
+        });
+      }
+    );
+    req.on("error", reject);
+    req.on("timeout", () => {
+      req.destroy(new Error("Cloud policy fetch timed out"));
+    });
+    req.end();
+  });
+}
+async function syncOnce() {
+  const creds = readCredentials();
+  if (!creds) return;
+  try {
+    const rules = await fetchCloudRules(creds.apiKey, creds.apiUrl);
+    const cache = { fetchedAt: (/* @__PURE__ */ new Date()).toISOString(), rules };
+    const dir = import_path20.default.dirname(rulesCacheFile());
+    if (!import_fs17.default.existsSync(dir)) import_fs17.default.mkdirSync(dir, { recursive: true });
+    import_fs17.default.writeFileSync(rulesCacheFile(), JSON.stringify(cache, null, 2) + "\n", "utf-8");
+  } catch {
+  }
+}
+async function runCloudSync() {
+  const creds = readCredentials();
+  if (!creds) {
+    return { ok: false, reason: "No API key configured. Add credentials with: node9 login" };
+  }
+  try {
+    const rules = await fetchCloudRules(creds.apiKey, creds.apiUrl);
+    const cache = { fetchedAt: (/* @__PURE__ */ new Date()).toISOString(), rules };
+    const dir = import_path20.default.dirname(rulesCacheFile());
+    if (!import_fs17.default.existsSync(dir)) import_fs17.default.mkdirSync(dir, { recursive: true });
+    import_fs17.default.writeFileSync(rulesCacheFile(), JSON.stringify(cache, null, 2) + "\n", "utf-8");
+    return { ok: true, rules: rules.length, fetchedAt: cache.fetchedAt };
+  } catch (err2) {
+    return { ok: false, reason: err2 instanceof Error ? err2.message : String(err2) };
+  }
+}
+function getCloudSyncStatus() {
+  try {
+    const raw = JSON.parse(import_fs17.default.readFileSync(rulesCacheFile(), "utf-8"));
+    if (!Array.isArray(raw.rules) || typeof raw.fetchedAt !== "string") return { cached: false };
+    return { cached: true, rules: raw.rules.length, fetchedAt: raw.fetchedAt };
+  } catch {
+    return { cached: false };
+  }
+}
+function getCloudRules() {
+  try {
+    const raw = JSON.parse(import_fs17.default.readFileSync(rulesCacheFile(), "utf-8"));
+    return Array.isArray(raw.rules) ? raw.rules : null;
+  } catch {
+    return null;
+  }
+}
+function startCloudSync() {
+  const rawHours = getConfig().settings.cloudSyncIntervalHours ?? DEFAULT_INTERVAL_HOURS;
+  const intervalHours = Math.max(rawHours, MIN_INTERVAL_HOURS);
+  const intervalMs = intervalHours * 60 * 60 * 1e3;
+  const initial = setTimeout(() => void syncOnce(), 3e4);
+  initial.unref();
+  const recurring = setInterval(() => void syncOnce(), intervalMs);
+  recurring.unref();
+}
+var import_fs17, import_https, import_os15, import_path20, rulesCacheFile, DEFAULT_API_URL, DEFAULT_INTERVAL_HOURS, MIN_INTERVAL_HOURS;
+var init_sync = __esm({
+  "src/daemon/sync.ts"() {
+    "use strict";
+    import_fs17 = __toESM(require("fs"));
+    import_https = __toESM(require("https"));
+    import_os15 = __toESM(require("os"));
+    import_path20 = __toESM(require("path"));
+    init_config();
+    rulesCacheFile = () => import_path20.default.join(import_os15.default.homedir(), ".node9", "rules-cache.json");
+    DEFAULT_API_URL = "https://api.node9.ai/api/v1/policy";
+    DEFAULT_INTERVAL_HOURS = 5;
+    MIN_INTERVAL_HOURS = 1;
+  }
+});
+
 // src/daemon/server.ts
 function startDaemon() {
   startCostSync();
+  startCloudSync();
   loadInsightCounts();
   const csrfToken = (0, import_crypto7.randomUUID)();
   const internalToken = (0, import_crypto7.randomUUID)();
@@ -6284,7 +6440,7 @@ function startDaemon() {
     idleTimer = setTimeout(() => {
       if (autoStarted) {
         try {
-          import_fs17.default.unlinkSync(DAEMON_PID_FILE);
+          import_fs18.default.unlinkSync(DAEMON_PID_FILE);
         } catch {
         }
       }
@@ -6447,7 +6603,7 @@ data: ${JSON.stringify(item.data)}
             status: "pending"
           });
         }
-        const projectCwd = typeof cwd === "string" && import_path20.default.isAbsolute(cwd) ? cwd : void 0;
+        const projectCwd = typeof cwd === "string" && import_path21.default.isAbsolute(cwd) ? cwd : void 0;
         const projectConfig = getConfig(projectCwd);
         const browserEnabled = projectConfig.settings.approvers?.browser !== false;
         const terminalEnabled = projectConfig.settings.approvers?.terminal !== false;
@@ -6837,8 +6993,8 @@ data: ${JSON.stringify(item.data)}
         const body = await readBody(req);
         const data = body ? JSON.parse(body) : {};
         const configPath = data.configPath ?? GLOBAL_CONFIG_PATH;
-        const node9Dir = import_path20.default.dirname(GLOBAL_CONFIG_PATH);
-        if (!import_path20.default.resolve(configPath).startsWith(node9Dir + import_path20.default.sep)) {
+        const node9Dir = import_path21.default.dirname(GLOBAL_CONFIG_PATH);
+        if (!import_path21.default.resolve(configPath).startsWith(node9Dir + import_path21.default.sep)) {
           res.writeHead(400, { "Content-Type": "application/json" });
           return res.end(
             JSON.stringify({ error: "configPath must be within the node9 config directory" })
@@ -6949,14 +7105,14 @@ data: ${JSON.stringify(item.data)}
   server.on("error", (e) => {
     if (e.code === "EADDRINUSE") {
       try {
-        if (import_fs17.default.existsSync(DAEMON_PID_FILE)) {
-          const { pid } = JSON.parse(import_fs17.default.readFileSync(DAEMON_PID_FILE, "utf-8"));
+        if (import_fs18.default.existsSync(DAEMON_PID_FILE)) {
+          const { pid } = JSON.parse(import_fs18.default.readFileSync(DAEMON_PID_FILE, "utf-8"));
           process.kill(pid, 0);
           return process.exit(0);
         }
       } catch {
         try {
-          import_fs17.default.unlinkSync(DAEMON_PID_FILE);
+          import_fs18.default.unlinkSync(DAEMON_PID_FILE);
         } catch {
         }
         server.listen(DAEMON_PORT, DAEMON_HOST);
@@ -7015,13 +7171,13 @@ data: ${JSON.stringify(item.data)}
   }
   startActivitySocket();
 }
-var import_http, import_fs17, import_path20, import_crypto7, import_child_process4, import_chalk2;
+var import_http, import_fs18, import_path21, import_crypto7, import_child_process4, import_chalk2;
 var init_server = __esm({
   "src/daemon/server.ts"() {
     "use strict";
     import_http = __toESM(require("http"));
-    import_fs17 = __toESM(require("fs"));
-    import_path20 = __toESM(require("path"));
+    import_fs18 = __toESM(require("fs"));
+    import_path21 = __toESM(require("path"));
     import_crypto7 = require("crypto");
     import_child_process4 = require("child_process");
     import_chalk2 = __toESM(require("chalk"));
@@ -7032,57 +7188,327 @@ var init_server = __esm({
     init_patch();
     init_config_schema();
     init_costSync();
+    init_sync();
+  }
+});
+
+// src/daemon/service.ts
+function resolveNode9Binary() {
+  try {
+    const script = process.argv[1];
+    if (typeof script === "string" && import_path22.default.isAbsolute(script) && import_fs19.default.existsSync(script)) {
+      return import_fs19.default.realpathSync(script);
+    }
+  } catch {
+  }
+  try {
+    const cmd = process.platform === "win32" ? "where" : "which";
+    const r = (0, import_child_process5.spawnSync)(cmd, ["node9"], { encoding: "utf8", timeout: 3e3 });
+    if (r.status === 0 && r.stdout.trim()) {
+      return r.stdout.trim().split("\n")[0].trim();
+    }
+  } catch {
+  }
+  return null;
+}
+function xmlEscape(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+function launchdPlist(binaryPath) {
+  const logDir = import_path22.default.join(import_os16.default.homedir(), ".node9");
+  const nodePath = xmlEscape(process.execPath);
+  const scriptPath = xmlEscape(binaryPath);
+  const outLog = xmlEscape(import_path22.default.join(logDir, "daemon.log"));
+  const errLog = xmlEscape(import_path22.default.join(logDir, "daemon-error.log"));
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>Label</key>
+    <string>${LAUNCHD_LABEL}</string>
+    <key>ProgramArguments</key>
+    <array>
+        <string>${nodePath}</string>
+        <string>${scriptPath}</string>
+        <string>daemon</string>
+    </array>
+    <key>RunAtLoad</key>
+    <true/>
+    <key>KeepAlive</key>
+    <true/>
+    <key>ThrottleInterval</key>
+    <integer>10</integer>
+    <key>StandardOutPath</key>
+    <string>${outLog}</string>
+    <key>StandardErrorPath</key>
+    <string>${errLog}</string>
+    <key>EnvironmentVariables</key>
+    <dict>
+        <key>NODE9_AUTO_STARTED</key>
+        <string>1</string>
+        <key>NODE9_BROWSER_OPENED</key>
+        <string>1</string>
+    </dict>
+</dict>
+</plist>
+`;
+}
+function installLaunchd(binaryPath) {
+  const dir = import_path22.default.dirname(LAUNCHD_PLIST);
+  if (!import_fs19.default.existsSync(dir)) import_fs19.default.mkdirSync(dir, { recursive: true });
+  import_fs19.default.writeFileSync(LAUNCHD_PLIST, launchdPlist(binaryPath), "utf-8");
+  (0, import_child_process5.spawnSync)("launchctl", ["unload", LAUNCHD_PLIST], { encoding: "utf8" });
+  const r = (0, import_child_process5.spawnSync)("launchctl", ["load", "-w", LAUNCHD_PLIST], {
+    encoding: "utf8",
+    timeout: 5e3
+  });
+  if (r.status !== 0) {
+    throw new Error(`launchctl load failed: ${r.stderr || r.stdout || "unknown error"}`);
+  }
+}
+function uninstallLaunchd() {
+  if (import_fs19.default.existsSync(LAUNCHD_PLIST)) {
+    (0, import_child_process5.spawnSync)("launchctl", ["unload", "-w", LAUNCHD_PLIST], { encoding: "utf8", timeout: 5e3 });
+    import_fs19.default.unlinkSync(LAUNCHD_PLIST);
+  }
+}
+function isLaunchdInstalled() {
+  return import_fs19.default.existsSync(LAUNCHD_PLIST);
+}
+function systemdUnit(binaryPath) {
+  return `[Unit]
+Description=node9 approval daemon
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=${process.execPath} ${binaryPath} daemon
+Restart=on-failure
+RestartSec=10s
+Environment=NODE9_AUTO_STARTED=1
+Environment=NODE9_BROWSER_OPENED=1
+
+[Install]
+WantedBy=default.target
+`;
+}
+function installSystemd(binaryPath) {
+  if (!import_fs19.default.existsSync(SYSTEMD_UNIT_DIR)) {
+    import_fs19.default.mkdirSync(SYSTEMD_UNIT_DIR, { recursive: true });
+  }
+  import_fs19.default.writeFileSync(SYSTEMD_UNIT, systemdUnit(binaryPath), "utf-8");
+  try {
+    (0, import_child_process5.execFileSync)("loginctl", ["enable-linger", import_os16.default.userInfo().username], { timeout: 3e3 });
+  } catch {
+  }
+  const reload = (0, import_child_process5.spawnSync)("systemctl", ["--user", "daemon-reload"], {
+    encoding: "utf8",
+    timeout: 5e3
+  });
+  if (reload.status !== 0) {
+    throw new Error(`systemctl daemon-reload failed: ${reload.stderr}`);
+  }
+  (0, import_child_process5.spawnSync)("systemctl", ["--user", "stop", "node9-daemon"], { encoding: "utf8", timeout: 3e3 });
+  const enable = (0, import_child_process5.spawnSync)("systemctl", ["--user", "enable", "--now", "node9-daemon"], {
+    encoding: "utf8",
+    timeout: 5e3
+  });
+  if (enable.status !== 0) {
+    throw new Error(`systemctl enable failed: ${enable.stderr}`);
+  }
+}
+function uninstallSystemd() {
+  if (import_fs19.default.existsSync(SYSTEMD_UNIT)) {
+    (0, import_child_process5.spawnSync)("systemctl", ["--user", "disable", "--now", "node9-daemon"], {
+      encoding: "utf8",
+      timeout: 5e3
+    });
+    (0, import_child_process5.spawnSync)("systemctl", ["--user", "daemon-reload"], { encoding: "utf8", timeout: 5e3 });
+    import_fs19.default.unlinkSync(SYSTEMD_UNIT);
+  }
+}
+function isSystemdInstalled() {
+  return import_fs19.default.existsSync(SYSTEMD_UNIT);
+}
+function stopRunningDaemon() {
+  const pidFile = import_path22.default.join(import_os16.default.homedir(), ".node9", "daemon.pid");
+  if (!import_fs19.default.existsSync(pidFile)) return;
+  try {
+    const data = JSON.parse(import_fs19.default.readFileSync(pidFile, "utf-8"));
+    const pid = data.pid;
+    const MAX_PID2 = 4194304;
+    if (typeof pid === "number" && Number.isInteger(pid) && pid > 0 && pid <= MAX_PID2) {
+      try {
+        process.kill(pid, "SIGTERM");
+        const deadline = Date.now() + 3e3;
+        const pollStop = (0, import_child_process5.spawnSync)(
+          "sh",
+          ["-c", `while kill -0 ${pid} 2>/dev/null; do sleep 0.1; done`],
+          {
+            timeout: 3100
+          }
+        );
+        void pollStop;
+        void deadline;
+      } catch {
+      }
+    }
+    try {
+      import_fs19.default.unlinkSync(pidFile);
+    } catch {
+    }
+  } catch {
+  }
+}
+function installDaemonService() {
+  const binary = resolveNode9Binary();
+  if (!binary) {
+    return { ok: false, reason: "Could not locate the node9 binary. Is it in your PATH?" };
+  }
+  stopRunningDaemon();
+  try {
+    if (process.platform === "darwin") {
+      const alreadyInstalled = isLaunchdInstalled();
+      installLaunchd(binary);
+      return { ok: true, platform: "launchd", alreadyInstalled };
+    }
+    if (process.platform === "linux") {
+      const check = (0, import_child_process5.spawnSync)("systemctl", ["--user", "--version"], {
+        encoding: "utf8",
+        timeout: 2e3
+      });
+      if (check.status !== 0) {
+        return {
+          ok: false,
+          reason: "systemd not available. Start the daemon manually with: node9 daemon start"
+        };
+      }
+      const alreadyInstalled = isSystemdInstalled();
+      installSystemd(binary);
+      return { ok: true, platform: "systemd", alreadyInstalled };
+    }
+    return {
+      ok: false,
+      reason: `Automatic service install is not supported on ${process.platform}. Start the daemon manually with: node9 daemon start`
+    };
+  } catch (err2) {
+    return {
+      ok: false,
+      reason: err2 instanceof Error ? err2.message : String(err2)
+    };
+  }
+}
+function uninstallDaemonService() {
+  try {
+    if (process.platform === "darwin") {
+      uninstallLaunchd();
+      return { ok: true, platform: "launchd", alreadyInstalled: false };
+    }
+    if (process.platform === "linux") {
+      uninstallSystemd();
+      return { ok: true, platform: "systemd", alreadyInstalled: false };
+    }
+    return {
+      ok: false,
+      reason: `Service management not supported on ${process.platform}.`
+    };
+  } catch (err2) {
+    return {
+      ok: false,
+      reason: err2 instanceof Error ? err2.message : String(err2)
+    };
+  }
+}
+function isDaemonServiceInstalled() {
+  if (process.platform === "darwin") return isLaunchdInstalled();
+  if (process.platform === "linux") return isSystemdInstalled();
+  return false;
+}
+var import_fs19, import_path22, import_os16, import_child_process5, LAUNCHD_LABEL, LAUNCHD_PLIST, SYSTEMD_UNIT_DIR, SYSTEMD_UNIT;
+var init_service = __esm({
+  "src/daemon/service.ts"() {
+    "use strict";
+    import_fs19 = __toESM(require("fs"));
+    import_path22 = __toESM(require("path"));
+    import_os16 = __toESM(require("os"));
+    import_child_process5 = require("child_process");
+    LAUNCHD_LABEL = "ai.node9.daemon";
+    LAUNCHD_PLIST = import_path22.default.join(import_os16.default.homedir(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
+    SYSTEMD_UNIT_DIR = import_path22.default.join(import_os16.default.homedir(), ".config", "systemd", "user");
+    SYSTEMD_UNIT = import_path22.default.join(SYSTEMD_UNIT_DIR, "node9-daemon.service");
   }
 });
 
 // src/daemon/index.ts
 function stopDaemon() {
-  if (!import_fs18.default.existsSync(DAEMON_PID_FILE)) return console.log(import_chalk3.default.yellow("Not running."));
+  if (!import_fs20.default.existsSync(DAEMON_PID_FILE)) return console.log(import_chalk3.default.yellow("Not running."));
   try {
-    const { pid } = JSON.parse(import_fs18.default.readFileSync(DAEMON_PID_FILE, "utf-8"));
+    const data = JSON.parse(import_fs20.default.readFileSync(DAEMON_PID_FILE, "utf-8"));
+    const pid = data.pid;
+    if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0 || pid > MAX_PID) {
+      console.log(import_chalk3.default.gray("Cleaned up invalid PID file."));
+      return;
+    }
     process.kill(pid, "SIGTERM");
     console.log(import_chalk3.default.green("\u2705 Stopped."));
   } catch {
     console.log(import_chalk3.default.gray("Cleaned up stale PID file."));
   } finally {
     try {
-      import_fs18.default.unlinkSync(DAEMON_PID_FILE);
+      import_fs20.default.unlinkSync(DAEMON_PID_FILE);
     } catch {
     }
   }
 }
 function daemonStatus() {
-  if (import_fs18.default.existsSync(DAEMON_PID_FILE)) {
+  const serviceInstalled = isDaemonServiceInstalled();
+  const serviceLabel = serviceInstalled ? import_chalk3.default.green("installed (starts on login)") : import_chalk3.default.yellow("not installed \u2014 run: node9 daemon install");
+  let processStatus;
+  if (import_fs20.default.existsSync(DAEMON_PID_FILE)) {
     try {
-      const { pid } = JSON.parse(import_fs18.default.readFileSync(DAEMON_PID_FILE, "utf-8"));
-      process.kill(pid, 0);
-      console.log(import_chalk3.default.green("Node9 daemon: running"));
-      return;
+      const data = JSON.parse(import_fs20.default.readFileSync(DAEMON_PID_FILE, "utf-8"));
+      const pid = data.pid;
+      const port = data.port;
+      if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0 || pid > MAX_PID) {
+        processStatus = import_chalk3.default.yellow("not running (invalid PID file)");
+      } else {
+        process.kill(pid, 0);
+        processStatus = import_chalk3.default.green(
+          `running  (PID ${pid}, port ${typeof port === "number" ? port : DAEMON_PORT})`
+        );
+      }
     } catch {
-      console.log(import_chalk3.default.yellow("Node9 daemon: not running (stale PID)"));
-      return;
+      processStatus = import_chalk3.default.yellow("not running (stale PID file)");
     }
-  }
-  const r = (0, import_child_process5.spawnSync)("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
-    encoding: "utf8",
-    timeout: 500
-  });
-  if (r.status === 0 && (r.stdout ?? "").includes(`:${DAEMON_PORT}`)) {
-    console.log(import_chalk3.default.yellow("Node9 daemon: running (no PID file \u2014 orphaned)"));
   } else {
-    console.log(import_chalk3.default.yellow("Node9 daemon: not running"));
+    const r = (0, import_child_process6.spawnSync)("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
+      encoding: "utf8",
+      timeout: 500
+    });
+    if (r.status === 0 && (r.stdout ?? "").includes(`:${DAEMON_PORT}`)) {
+      processStatus = import_chalk3.default.yellow(`running (orphaned \u2014 no PID file)`);
+    } else {
+      processStatus = import_chalk3.default.yellow("not running");
+    }
   }
+  console.log(`
+  Process : ${processStatus}`);
+  console.log(`  Service : ${serviceLabel}
+`);
 }
-var import_fs18, import_chalk3, import_child_process5;
+var import_fs20, import_chalk3, import_child_process6, MAX_PID;
 var init_daemon2 = __esm({
   "src/daemon/index.ts"() {
     "use strict";
-    import_fs18 = __toESM(require("fs"));
+    import_fs20 = __toESM(require("fs"));
     import_chalk3 = __toESM(require("chalk"));
-    import_child_process5 = require("child_process");
+    import_child_process6 = require("child_process");
     init_server();
     init_state2();
+    init_service();
     init_state2();
+    init_service();
+    MAX_PID = 4194304;
   }
 });
 
@@ -7111,22 +7537,22 @@ function formatBase(activity) {
   const time = new Date(activity.ts).toLocaleTimeString([], { hour12: false });
   const icon = getIcon(activity.tool);
   const toolName = activity.tool.slice(0, 16).padEnd(16);
-  const argsStr = JSON.stringify(activity.args ?? {}).replace(/\s+/g, " ").replaceAll(import_os25.default.homedir(), "~");
+  const argsStr = JSON.stringify(activity.args ?? {}).replace(/\s+/g, " ").replaceAll(import_os29.default.homedir(), "~");
   const argsPreview = argsStr.length > 70 ? argsStr.slice(0, 70) + "\u2026" : argsStr;
-  return `${import_chalk19.default.gray(time)} ${icon} ${import_chalk19.default.white.bold(toolName)} ${import_chalk19.default.dim(argsPreview)}`;
+  return `${import_chalk23.default.gray(time)} ${icon} ${import_chalk23.default.white.bold(toolName)} ${import_chalk23.default.dim(argsPreview)}`;
 }
 function renderResult(activity, result) {
   const base = formatBase(activity);
   let status;
   if (result.status === "allow") {
-    status = import_chalk19.default.green("\u2713 ALLOW");
+    status = import_chalk23.default.green("\u2713 ALLOW");
   } else if (result.status === "dlp") {
-    status = import_chalk19.default.bgRed.white.bold(" \u{1F6E1}\uFE0F  DLP ");
+    status = import_chalk23.default.bgRed.white.bold(" \u{1F6E1}\uFE0F  DLP ");
   } else {
-    status = import_chalk19.default.red("\u2717 BLOCK");
+    status = import_chalk23.default.red("\u2717 BLOCK");
   }
   const cost = result.costEstimate ?? activity.costEstimate;
-  const costSuffix = cost == null ? "" : import_chalk19.default.dim(`  ~$${cost >= 1e-3 ? cost.toFixed(3) : "0.000"}`);
+  const costSuffix = cost == null ? "" : import_chalk23.default.dim(`  ~$${cost >= 1e-3 ? cost.toFixed(3) : "0.000"}`);
   if (process.stdout.isTTY) {
     if (pendingShownForId === activity.id && pendingWrappedLines > 1) {
       import_readline5.default.moveCursor(process.stdout, 0, -(pendingWrappedLines - 1));
@@ -7143,19 +7569,19 @@ function renderResult(activity, result) {
 }
 function renderPending(activity) {
   if (!process.stdout.isTTY) return;
-  const line = `${formatBase(activity)}  ${import_chalk19.default.yellow("\u25CF \u2026")}`;
+  const line = `${formatBase(activity)}  ${import_chalk23.default.yellow("\u25CF \u2026")}`;
   pendingShownForId = activity.id;
   pendingWrappedLines = wrappedLineCount(line);
   process.stdout.write(`${line}\r`);
 }
 async function ensureDaemon() {
   let pidPort = null;
-  if (import_fs29.default.existsSync(PID_FILE)) {
+  if (import_fs33.default.existsSync(PID_FILE)) {
     try {
-      const { port } = JSON.parse(import_fs29.default.readFileSync(PID_FILE, "utf-8"));
+      const { port } = JSON.parse(import_fs33.default.readFileSync(PID_FILE, "utf-8"));
       pidPort = port;
     } catch {
-      console.error(import_chalk19.default.dim("\u26A0\uFE0F  Could not read PID file; falling back to default port."));
+      console.error(import_chalk23.default.dim("\u26A0\uFE0F  Could not read PID file; falling back to default port."));
     }
   }
   const checkPort = pidPort ?? DAEMON_PORT;
@@ -7166,8 +7592,8 @@ async function ensureDaemon() {
     if (res.ok) return checkPort;
   } catch {
   }
-  console.log(import_chalk19.default.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon..."));
-  const child = (0, import_child_process14.spawn)(process.execPath, [process.argv[1], "daemon"], {
+  console.log(import_chalk23.default.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon..."));
+  const child = (0, import_child_process15.spawn)(process.execPath, [process.argv[1], "daemon"], {
     detached: true,
     stdio: "ignore",
     env: { ...process.env, NODE9_AUTO_STARTED: "1" }
@@ -7183,7 +7609,7 @@ async function ensureDaemon() {
     } catch {
     }
   }
-  console.error(import_chalk19.default.red("\u274C Daemon failed to start. Try: node9 daemon start"));
+  console.error(import_chalk23.default.red("\u274C Daemon failed to start. Try: node9 daemon start"));
   process.exit(1);
 }
 function postDecisionHttp(id, decision, csrfToken, port, opts) {
@@ -7215,27 +7641,56 @@ function postDecisionHttp(id, decision, csrfToken, port, opts) {
     req.end(body);
   });
 }
+function extractArgsSummary(toolName, args) {
+  const a = args;
+  if (!a) return "";
+  const cmd = a["command"] ?? a["cmd"];
+  if (typeof cmd === "string") return cmd.replace(/\s+/g, " ").trim();
+  const fp = a["file_path"] ?? a["path"] ?? a["filepath"];
+  if (typeof fp === "string") return fp;
+  const q = a["query"] ?? a["sql"];
+  if (typeof q === "string") return q.replace(/\s+/g, " ").trim();
+  const s = JSON.stringify(a).replace(/\s+/g, " ");
+  return s.length > 80 ? s.slice(0, 80) + "\u2026" : s;
+}
+function cleanReason(raw) {
+  return raw.replace(/\s*[—–-]+\s*(blocked by|requires human approval)[^)]*(\([^)]*\))?\.?\s*$/i, "").trim();
+}
+function cleanBlockedBy(raw) {
+  const shieldMatch = raw.match(/shield:([^:]+):/i);
+  if (shieldMatch) return shieldMatch[1];
+  const smartMatch = raw.match(/^Smart Rule:\s*(.+)$/i);
+  if (smartMatch) return smartMatch[1];
+  return raw;
+}
 function buildCardLines(req, localCount = 0) {
   if (req.recoveryCommand) {
     return buildRecoveryCardLines(req);
   }
-  const argsStr = JSON.stringify(req.args ?? {}).replace(/\s+/g, " ");
-  const argsPreview = argsStr.length > 60 ? argsStr.slice(0, 60) + "\u2026" : argsStr;
-  const tierLabel = req.riskMetadata?.tier != null ? req.riskMetadata.tier <= 2 ? `${YELLOW}\u26A0  Tier ${req.riskMetadata.tier}` : `${RED}\u{1F6D1} Tier ${req.riskMetadata.tier}` : `${YELLOW}\u26A0  Review`;
-  const blockedBy = req.riskMetadata?.blockedByLabel ?? "Policy rule";
+  const argsSummary = extractArgsSummary(req.toolName, req.args);
+  const argsPreview = argsSummary.length > 72 ? argsSummary.slice(0, 72) + "\u2026" : argsSummary;
+  const rawBlockedBy = req.riskMetadata?.blockedByLabel ?? "Policy rule";
+  const blockedBy = cleanBlockedBy(rawBlockedBy);
+  const isBlock = req.riskMetadata?.tier != null && req.riskMetadata.tier <= 2;
+  const severityIcon = isBlock ? `${RED}\u{1F6D1}` : `${YELLOW}\u26A0 `;
+  const rawDesc = req.riskMetadata?.ruleDescription ?? "";
+  const description = rawDesc ? cleanReason(rawDesc) : "";
   const lines = [
     ``,
     `${BOLD2}${CYAN}\u2554\u2550\u2550 Node9 Approval Required \u2550\u2550\u2557${RESET2}`,
     `${CYAN}\u2551${RESET2} Tool:    ${BOLD2}${req.toolName}${RESET2}`,
-    `${CYAN}\u2551${RESET2} Reason:  ${tierLabel} \u2014 ${blockedBy}${RESET2}`
+    `${CYAN}\u2551${RESET2} Policy:  ${severityIcon} ${blockedBy}${RESET2}`
   ];
-  if (req.riskMetadata?.ruleDescription) {
-    lines.push(`${CYAN}\u2551${RESET2} ${YELLOW}\u2139  ${req.riskMetadata.ruleDescription}${RESET2}`);
+  if (description) {
+    lines.push(`${CYAN}\u2551${RESET2} Why:     ${YELLOW}${description}${RESET2}`);
   }
-  if (req.riskMetadata?.ruleName && blockedBy.includes("Taint")) {
+  if (req.riskMetadata?.ruleName && rawBlockedBy.includes("Taint")) {
     lines.push(`${CYAN}\u2551${RESET2} ${YELLOW}\u26A0  ${req.riskMetadata.ruleName}${RESET2}`);
   }
-  lines.push(`${CYAN}\u2551${RESET2} Args:    ${GRAY}${argsPreview}${RESET2}`);
+  if (argsPreview) {
+    const argLabel = req.toolName.toLowerCase().includes("bash") ? "Command" : "Args   ";
+    lines.push(`${CYAN}\u2551${RESET2} ${argLabel}:  ${GRAY}${argsPreview}${RESET2}`);
+  }
   if (localCount >= 2) {
     lines.push(
       `${CYAN}\u2551${RESET2} ${YELLOW}\u{1F4A1}${RESET2} Approved ${localCount}\xD7 before \u2014 ${BOLD2}[a]${RESET2}${YELLOW} creates a permanent rule${RESET2}`
@@ -7275,9 +7730,9 @@ function buildRecoveryCardLines(req) {
   ];
 }
 function readApproversFromDisk() {
-  const configPath = import_path32.default.join(import_os25.default.homedir(), ".node9", "config.json");
+  const configPath = import_path36.default.join(import_os29.default.homedir(), ".node9", "config.json");
   try {
-    const raw = JSON.parse(import_fs29.default.readFileSync(configPath, "utf-8"));
+    const raw = JSON.parse(import_fs33.default.readFileSync(configPath, "utf-8"));
     const settings = raw.settings ?? {};
     return settings.approvers ?? {};
   } catch {
@@ -7288,20 +7743,20 @@ function approverStatusLine() {
   const a = readApproversFromDisk();
   const fmt = (label, key) => {
     const on = a[key] !== false;
-    return `[${key[0]}]${label.slice(1)} ${on ? import_chalk19.default.green("\u2713") : import_chalk19.default.dim("\u2717")}`;
+    return `[${key[0]}]${label.slice(1)} ${on ? import_chalk23.default.green("\u2713") : import_chalk23.default.dim("\u2717")}`;
   };
   return `${fmt("native", "native")}  ${fmt("browser", "browser")}  ${fmt("cloud", "cloud")}  ${fmt("terminal", "terminal")}`;
 }
 function toggleApprover(channel) {
-  const configPath = import_path32.default.join(import_os25.default.homedir(), ".node9", "config.json");
+  const configPath = import_path36.default.join(import_os29.default.homedir(), ".node9", "config.json");
   try {
-    const raw = JSON.parse(import_fs29.default.readFileSync(configPath, "utf-8"));
+    const raw = JSON.parse(import_fs33.default.readFileSync(configPath, "utf-8"));
     const settings = raw.settings ?? {};
     const approvers = settings.approvers ?? {};
     approvers[channel] = approvers[channel] === false;
     settings.approvers = approvers;
     raw.settings = settings;
-    import_fs29.default.writeFileSync(configPath, JSON.stringify(raw, null, 2) + "\n");
+    import_fs33.default.writeFileSync(configPath, JSON.stringify(raw, null, 2) + "\n");
   } catch (err2) {
     process.stderr.write(`[node9] toggleApprover failed: ${String(err2)}
 `);
@@ -7333,7 +7788,7 @@ async function startTail(options = {}) {
       req2.end();
     });
     if (result.ok) {
-      console.log(import_chalk19.default.green("\u2713 Flight Recorder buffer cleared."));
+      console.log(import_chalk23.default.green("\u2713 Flight Recorder buffer cleared."));
     } else if (result.code === "ECONNREFUSED") {
       throw new Error("Daemon is not running. Start it with: node9 daemon start");
     } else if (result.code === "ETIMEDOUT") {
@@ -7377,7 +7832,7 @@ async function startTail(options = {}) {
       const channel = name === "n" ? "native" : name === "b" ? "browser" : name === "c" ? "cloud" : name === "t" ? "terminal" : null;
       if (channel) {
         toggleApprover(channel);
-        console.log(import_chalk19.default.dim(`  Approvers: ${approverStatusLine()}`));
+        console.log(import_chalk23.default.dim(`  Approvers: ${approverStatusLine()}`));
       }
     };
     process.stdin.on("keypress", idleKeypressHandler);
@@ -7443,7 +7898,7 @@ async function startTail(options = {}) {
           localAllowCounts.get(req2.toolName) ?? 0
         )
       );
-      const decisionStamp = action === "always-allow" ? import_chalk19.default.yellow("\u2605 ALWAYS ALLOW") : action === "trust" ? import_chalk19.default.cyan("\u23F1 TRUST 30m") : action === "allow" ? import_chalk19.default.green("\u2713 ALLOWED") : action === "redirect" ? import_chalk19.default.yellow("\u21A9 REDIRECT AI") : import_chalk19.default.red("\u2717 DENIED");
+      const decisionStamp = action === "always-allow" ? import_chalk23.default.yellow("\u2605 ALWAYS ALLOW") : action === "trust" ? import_chalk23.default.cyan("\u23F1 TRUST 30m") : action === "allow" ? import_chalk23.default.green("\u2713 ALLOWED") : action === "redirect" ? import_chalk23.default.yellow("\u21A9 REDIRECT AI") : import_chalk23.default.red("\u2717 DENIED");
       stampedLines.push(`  ${BOLD2}\u2192${RESET2} ${decisionStamp} ${GRAY}(terminal)${RESET2}`, ``);
       for (const line of stampedLines) process.stdout.write(line + "\n");
       process.stdout.write(SHOW_CURSOR);
@@ -7471,8 +7926,8 @@ async function startTail(options = {}) {
       }
       postDecisionHttp(req2.id, httpDecision, csrfToken, port, httpOpts).catch((err2) => {
         try {
-          import_fs29.default.appendFileSync(
-            import_path32.default.join(import_os25.default.homedir(), ".node9", "hook-debug.log"),
+          import_fs33.default.appendFileSync(
+            import_path36.default.join(import_os29.default.homedir(), ".node9", "hook-debug.log"),
             `[tail] POST /decision failed: ${String(err2)}
 `
           );
@@ -7494,7 +7949,7 @@ async function startTail(options = {}) {
       );
       const stampedLines = buildCardLines(req2, priorCount);
       if (externalDecision) {
-        const source = externalDecision === "allow" ? import_chalk19.default.green("\u2713 ALLOWED") : import_chalk19.default.red("\u2717 DENIED");
+        const source = externalDecision === "allow" ? import_chalk23.default.green("\u2713 ALLOWED") : import_chalk23.default.red("\u2717 DENIED");
         stampedLines.push(`  ${BOLD2}\u2192${RESET2} ${source} ${GRAY}(external)${RESET2}`, ``);
       }
       for (const line of stampedLines) process.stdout.write(line + "\n");
@@ -7540,10 +7995,10 @@ async function startTail(options = {}) {
   try {
     const browserEnabled = getConfig().settings.approvers?.browser !== false;
     if (browserEnabled) {
-      if (process.platform === "darwin") (0, import_child_process14.execSync)(`open "${dashboardUrl}"`, { stdio: "ignore" });
+      if (process.platform === "darwin") (0, import_child_process15.execSync)(`open "${dashboardUrl}"`, { stdio: "ignore" });
       else if (process.platform === "win32")
-        (0, import_child_process14.execSync)(`cmd /c start "" "${dashboardUrl}"`, { stdio: "ignore" });
-      else (0, import_child_process14.execSync)(`xdg-open "${dashboardUrl}"`, { stdio: "ignore" });
+        (0, import_child_process15.execSync)(`cmd /c start "" "${dashboardUrl}"`, { stdio: "ignore" });
+      else (0, import_child_process15.execSync)(`xdg-open "${dashboardUrl}"`, { stdio: "ignore" });
       const intToken = getInternalToken();
       fetch(`http://127.0.0.1:${port}/browser-opened`, {
         method: "POST",
@@ -7553,16 +8008,16 @@ async function startTail(options = {}) {
     }
   } catch {
   }
-  console.log(import_chalk19.default.cyan.bold(`
-\u{1F6F0}\uFE0F  Node9 tail  `) + import_chalk19.default.dim(`\u2192 ${dashboardUrl}`));
+  console.log(import_chalk23.default.cyan.bold(`
+\u{1F6F0}\uFE0F  Node9 tail  `) + import_chalk23.default.dim(`\u2192 ${dashboardUrl}`));
   if (canApprove) {
-    console.log(import_chalk19.default.dim("Card: [\u21B5/y] Allow  [n] Deny  [a] Always  [t] Trust 30m"));
-    console.log(import_chalk19.default.dim(`Approvers (toggle): ${approverStatusLine()}  [q] quit`));
+    console.log(import_chalk23.default.dim("Card: [\u21B5/y] Allow  [n] Deny  [a] Always  [t] Trust 30m"));
+    console.log(import_chalk23.default.dim(`Approvers (toggle): ${approverStatusLine()}  [q] quit`));
   }
   if (options.history) {
-    console.log(import_chalk19.default.dim("Showing history + live events.\n"));
+    console.log(import_chalk23.default.dim("Showing history + live events.\n"));
   } else {
-    console.log(import_chalk19.default.dim("Showing live events only. Use --history to include past.\n"));
+    console.log(import_chalk23.default.dim("Showing live events only. Use --history to include past.\n"));
   }
   process.on("SIGINT", () => {
     exitIdleMode();
@@ -7572,13 +8027,13 @@ async function startTail(options = {}) {
       import_readline5.default.clearLine(process.stdout, 0);
       import_readline5.default.cursorTo(process.stdout, 0);
     }
-    console.log(import_chalk19.default.dim("\n\u{1F6F0}\uFE0F  Disconnected."));
+    console.log(import_chalk23.default.dim("\n\u{1F6F0}\uFE0F  Disconnected."));
     process.exit(0);
   });
   const sseUrl = `http://127.0.0.1:${port}/events?capabilities=input`;
   const req = import_http2.default.get(sseUrl, (res) => {
     if (res.statusCode !== 200) {
-      console.error(import_chalk19.default.red(`Failed to connect: HTTP ${res.statusCode}`));
+      console.error(import_chalk23.default.red(`Failed to connect: HTTP ${res.statusCode}`));
       process.exit(1);
     }
     if (canApprove) enterIdleMode();
@@ -7609,7 +8064,7 @@ async function startTail(options = {}) {
         import_readline5.default.clearLine(process.stdout, 0);
         import_readline5.default.cursorTo(process.stdout, 0);
       }
-      console.log(import_chalk19.default.red("\n\u274C Daemon disconnected."));
+      console.log(import_chalk23.default.red("\n\u274C Daemon disconnected."));
       process.exit(1);
     });
   });
@@ -7701,9 +8156,9 @@ async function startTail(options = {}) {
       const hash = data.hash ?? "";
       const summary = data.argsSummary ?? data.tool;
       const fileCount = data.fileCount ?? 0;
-      const files = fileCount > 0 ? import_chalk19.default.dim(` \xB7 ${fileCount} file${fileCount === 1 ? "" : "s"}`) : "";
+      const files = fileCount > 0 ? import_chalk23.default.dim(` \xB7 ${fileCount} file${fileCount === 1 ? "" : "s"}`) : "";
       process.stdout.write(
-        `${import_chalk19.default.dim(time)}  ${import_chalk19.default.cyan("\u{1F4F8} snapshot")}  ${import_chalk19.default.dim(hash)}  ${summary}${files}
+        `${import_chalk23.default.dim(time)}  ${import_chalk23.default.cyan("\u{1F4F8} snapshot")}  ${import_chalk23.default.dim(hash)}  ${summary}${files}
 `
       );
       return;
@@ -7720,26 +8175,26 @@ async function startTail(options = {}) {
   }
   req.on("error", (err2) => {
     const msg = err2.code === "ECONNREFUSED" ? "Daemon is not running. Start it with: node9 daemon start" : err2.message;
-    console.error(import_chalk19.default.red(`
+    console.error(import_chalk23.default.red(`
 \u274C ${msg}`));
     process.exit(1);
   });
 }
-var import_http2, import_chalk19, import_fs29, import_os25, import_path32, import_readline5, import_child_process14, PID_FILE, ICONS, RESET2, BOLD2, RED, YELLOW, CYAN, GRAY, GREEN, HIDE_CURSOR, SHOW_CURSOR, ERASE_DOWN, pendingShownForId, pendingWrappedLines, DIVIDER;
+var import_http2, import_chalk23, import_fs33, import_os29, import_path36, import_readline5, import_child_process15, PID_FILE, ICONS, RESET2, BOLD2, RED, YELLOW, CYAN, GRAY, GREEN, HIDE_CURSOR, SHOW_CURSOR, ERASE_DOWN, pendingShownForId, pendingWrappedLines, DIVIDER;
 var init_tail = __esm({
   "src/tui/tail.ts"() {
     "use strict";
     import_http2 = __toESM(require("http"));
-    import_chalk19 = __toESM(require("chalk"));
-    import_fs29 = __toESM(require("fs"));
-    import_os25 = __toESM(require("os"));
-    import_path32 = __toESM(require("path"));
+    import_chalk23 = __toESM(require("chalk"));
+    import_fs33 = __toESM(require("fs"));
+    import_os29 = __toESM(require("os"));
+    import_path36 = __toESM(require("path"));
     import_readline5 = __toESM(require("readline"));
-    import_child_process14 = require("child_process");
+    import_child_process15 = require("child_process");
     init_daemon2();
     init_daemon();
     init_core();
-    PID_FILE = import_path32.default.join(import_os25.default.homedir(), ".node9", "daemon.pid");
+    PID_FILE = import_path36.default.join(import_os29.default.homedir(), ".node9", "daemon.pid");
     ICONS = {
       bash: "\u{1F4BB}",
       shell: "\u{1F4BB}",
@@ -7854,9 +8309,9 @@ function formatTimeLeft(resetsAt) {
   return ` (${m}m left)`;
 }
 function safeReadJson(filePath) {
-  if (!import_fs30.default.existsSync(filePath)) return null;
+  if (!import_fs34.default.existsSync(filePath)) return null;
   try {
-    return JSON.parse(import_fs30.default.readFileSync(filePath, "utf-8"));
+    return JSON.parse(import_fs34.default.readFileSync(filePath, "utf-8"));
   } catch {
     return null;
   }
@@ -7877,12 +8332,12 @@ function countHooksInFile(filePath) {
   return Object.keys(cfg.hooks).length;
 }
 function countRulesInDir(rulesDir) {
-  if (!import_fs30.default.existsSync(rulesDir)) return 0;
+  if (!import_fs34.default.existsSync(rulesDir)) return 0;
   let count = 0;
   try {
-    for (const entry of import_fs30.default.readdirSync(rulesDir, { withFileTypes: true })) {
+    for (const entry of import_fs34.default.readdirSync(rulesDir, { withFileTypes: true })) {
       if (entry.isDirectory()) {
-        count += countRulesInDir(import_path33.default.join(rulesDir, entry.name));
+        count += countRulesInDir(import_path37.default.join(rulesDir, entry.name));
       } else if (entry.isFile() && entry.name.endsWith(".md")) {
         count++;
       }
@@ -7893,46 +8348,46 @@ function countRulesInDir(rulesDir) {
 }
 function isSamePath(a, b) {
   try {
-    return import_path33.default.resolve(a) === import_path33.default.resolve(b);
+    return import_path37.default.resolve(a) === import_path37.default.resolve(b);
   } catch {
     return false;
   }
 }
 function countConfigs(cwd) {
-  const homeDir2 = import_os26.default.homedir();
-  const claudeDir = import_path33.default.join(homeDir2, ".claude");
+  const homeDir2 = import_os30.default.homedir();
+  const claudeDir = import_path37.default.join(homeDir2, ".claude");
   let claudeMdCount = 0;
   let rulesCount = 0;
   let hooksCount = 0;
   const userMcpServers = /* @__PURE__ */ new Set();
   const projectMcpServers = /* @__PURE__ */ new Set();
-  if (import_fs30.default.existsSync(import_path33.default.join(claudeDir, "CLAUDE.md"))) claudeMdCount++;
-  rulesCount += countRulesInDir(import_path33.default.join(claudeDir, "rules"));
-  const userSettings = import_path33.default.join(claudeDir, "settings.json");
+  if (import_fs34.default.existsSync(import_path37.default.join(claudeDir, "CLAUDE.md"))) claudeMdCount++;
+  rulesCount += countRulesInDir(import_path37.default.join(claudeDir, "rules"));
+  const userSettings = import_path37.default.join(claudeDir, "settings.json");
   for (const name of getMcpServerNames(userSettings)) userMcpServers.add(name);
   hooksCount += countHooksInFile(userSettings);
-  const userClaudeJson = import_path33.default.join(homeDir2, ".claude.json");
+  const userClaudeJson = import_path37.default.join(homeDir2, ".claude.json");
   for (const name of getMcpServerNames(userClaudeJson)) userMcpServers.add(name);
   for (const name of getDisabledMcpServers(userClaudeJson, "disabledMcpServers")) {
     userMcpServers.delete(name);
   }
   if (cwd) {
-    if (import_fs30.default.existsSync(import_path33.default.join(cwd, "CLAUDE.md"))) claudeMdCount++;
-    if (import_fs30.default.existsSync(import_path33.default.join(cwd, "CLAUDE.local.md"))) claudeMdCount++;
-    const projectClaudeDir = import_path33.default.join(cwd, ".claude");
+    if (import_fs34.default.existsSync(import_path37.default.join(cwd, "CLAUDE.md"))) claudeMdCount++;
+    if (import_fs34.default.existsSync(import_path37.default.join(cwd, "CLAUDE.local.md"))) claudeMdCount++;
+    const projectClaudeDir = import_path37.default.join(cwd, ".claude");
     const overlapsUserScope = isSamePath(projectClaudeDir, claudeDir);
     if (!overlapsUserScope) {
-      if (import_fs30.default.existsSync(import_path33.default.join(projectClaudeDir, "CLAUDE.md"))) claudeMdCount++;
-      rulesCount += countRulesInDir(import_path33.default.join(projectClaudeDir, "rules"));
-      const projSettings = import_path33.default.join(projectClaudeDir, "settings.json");
+      if (import_fs34.default.existsSync(import_path37.default.join(projectClaudeDir, "CLAUDE.md"))) claudeMdCount++;
+      rulesCount += countRulesInDir(import_path37.default.join(projectClaudeDir, "rules"));
+      const projSettings = import_path37.default.join(projectClaudeDir, "settings.json");
       for (const name of getMcpServerNames(projSettings)) projectMcpServers.add(name);
       hooksCount += countHooksInFile(projSettings);
     }
-    if (import_fs30.default.existsSync(import_path33.default.join(projectClaudeDir, "CLAUDE.local.md"))) claudeMdCount++;
-    const localSettings = import_path33.default.join(projectClaudeDir, "settings.local.json");
+    if (import_fs34.default.existsSync(import_path37.default.join(projectClaudeDir, "CLAUDE.local.md"))) claudeMdCount++;
+    const localSettings = import_path37.default.join(projectClaudeDir, "settings.local.json");
     for (const name of getMcpServerNames(localSettings)) projectMcpServers.add(name);
     hooksCount += countHooksInFile(localSettings);
-    const mcpJsonServers = getMcpServerNames(import_path33.default.join(cwd, ".mcp.json"));
+    const mcpJsonServers = getMcpServerNames(import_path37.default.join(cwd, ".mcp.json"));
     const disabledMcpJson = getDisabledMcpServers(localSettings, "disabledMcpjsonServers");
     for (const name of disabledMcpJson) mcpJsonServers.delete(name);
     for (const name of mcpJsonServers) projectMcpServers.add(name);
@@ -7965,12 +8420,12 @@ function readActiveShieldsHud() {
     return shieldsCache.value;
   }
   try {
-    const shieldsPath = import_path33.default.join(import_os26.default.homedir(), ".node9", "shields.json");
-    if (!import_fs30.default.existsSync(shieldsPath)) {
+    const shieldsPath = import_path37.default.join(import_os30.default.homedir(), ".node9", "shields.json");
+    if (!import_fs34.default.existsSync(shieldsPath)) {
       shieldsCache = { value: [], ts: now };
       return [];
     }
-    const parsed = JSON.parse(import_fs30.default.readFileSync(shieldsPath, "utf-8"));
+    const parsed = JSON.parse(import_fs34.default.readFileSync(shieldsPath, "utf-8"));
     if (!Array.isArray(parsed.active)) {
       shieldsCache = { value: [], ts: now };
       return [];
@@ -8072,17 +8527,17 @@ function renderContextLine(stdin) {
 async function main() {
   try {
     const [stdin, daemonStatus2] = await Promise.all([readStdin(), queryDaemon()]);
-    if (import_fs30.default.existsSync(import_path33.default.join(import_os26.default.homedir(), ".node9", "hud-debug"))) {
+    if (import_fs34.default.existsSync(import_path37.default.join(import_os30.default.homedir(), ".node9", "hud-debug"))) {
       try {
-        const logPath = import_path33.default.join(import_os26.default.homedir(), ".node9", "hud-debug.log");
+        const logPath = import_path37.default.join(import_os30.default.homedir(), ".node9", "hud-debug.log");
         const MAX_LOG_SIZE = 10 * 1024 * 1024;
         let size = 0;
         try {
-          size = import_fs30.default.statSync(logPath).size;
+          size = import_fs34.default.statSync(logPath).size;
         } catch {
         }
         if (size < MAX_LOG_SIZE) {
-          import_fs30.default.appendFileSync(
+          import_fs34.default.appendFileSync(
             logPath,
             JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), stdin }) + "\n"
           );
@@ -8103,11 +8558,11 @@ async function main() {
       try {
         const cwd = stdin.cwd ?? process.cwd();
         for (const configPath of [
-          import_path33.default.join(cwd, "node9.config.json"),
-          import_path33.default.join(import_os26.default.homedir(), ".node9", "config.json")
+          import_path37.default.join(cwd, "node9.config.json"),
+          import_path37.default.join(import_os30.default.homedir(), ".node9", "config.json")
         ]) {
-          if (!import_fs30.default.existsSync(configPath)) continue;
-          const cfg = JSON.parse(import_fs30.default.readFileSync(configPath, "utf-8"));
+          if (!import_fs34.default.existsSync(configPath)) continue;
+          const cfg = JSON.parse(import_fs34.default.readFileSync(configPath, "utf-8"));
           const hud = cfg.settings?.hud;
           if (hud && "showEnvironmentCounts" in hud) return hud.showEnvironmentCounts !== false;
         }
@@ -8125,13 +8580,13 @@ async function main() {
     renderOffline();
   }
 }
-var import_fs30, import_path33, import_os26, import_http3, RESET3, BOLD3, DIM, RED2, GREEN2, YELLOW2, BLUE, MAGENTA, CYAN2, WHITE, BAR_FILLED, BAR_EMPTY, BAR_WIDTH, shieldsCache, SHIELDS_CACHE_TTL_MS;
+var import_fs34, import_path37, import_os30, import_http3, RESET3, BOLD3, DIM, RED2, GREEN2, YELLOW2, BLUE, MAGENTA, CYAN2, WHITE, BAR_FILLED, BAR_EMPTY, BAR_WIDTH, shieldsCache, SHIELDS_CACHE_TTL_MS;
 var init_hud = __esm({
   "src/cli/hud.ts"() {
     "use strict";
-    import_fs30 = __toESM(require("fs"));
-    import_path33 = __toESM(require("path"));
-    import_os26 = __toESM(require("os"));
+    import_fs34 = __toESM(require("fs"));
+    import_path37 = __toESM(require("path"));
+    import_os30 = __toESM(require("os"));
     import_http3 = __toESM(require("http"));
     init_daemon();
     RESET3 = "\x1B[0m";
@@ -8542,7 +8997,9 @@ function detectAgents(homeDir2 = import_os11.default.homedir()) {
     claude: exists(import_path15.default.join(homeDir2, ".claude")) || exists(import_path15.default.join(homeDir2, ".claude.json")),
     gemini: exists(import_path15.default.join(homeDir2, ".gemini")),
     cursor: exists(import_path15.default.join(homeDir2, ".cursor")),
-    codex: exists(import_path15.default.join(homeDir2, ".codex"))
+    codex: exists(import_path15.default.join(homeDir2, ".codex")),
+    windsurf: exists(import_path15.default.join(homeDir2, ".codeium", "windsurf")),
+    vscode: exists(import_path15.default.join(homeDir2, ".vscode"))
   };
 }
 async function setupCursor() {
@@ -8691,6 +9148,38 @@ async function setupCodex() {
     printDaemonTip();
   }
 }
+function teardownCodex() {
+  const homeDir2 = import_os11.default.homedir();
+  const configPath = import_path15.default.join(homeDir2, ".codex", "config.toml");
+  const config = readToml(configPath);
+  if (!config?.mcp_servers) {
+    console.log(import_chalk.default.blue("  \u2139\uFE0F  ~/.codex/config.toml not found \u2014 nothing to remove"));
+    return;
+  }
+  let changed = false;
+  if (removeNode9McpServer(config.mcp_servers)) {
+    changed = true;
+    console.log(import_chalk.default.green("  \u2705 Removed node9 MCP server entry from ~/.codex/config.toml"));
+  }
+  for (const [name, server] of Object.entries(config.mcp_servers)) {
+    const args = server.args;
+    if (server.command === "node9" && Array.isArray(args) && args[0] === "mcp" && args[1] === "--upstream" && typeof args[2] === "string") {
+      const [originalCmd, ...originalArgs] = args[2].split(" ");
+      config.mcp_servers[name] = {
+        ...server,
+        command: originalCmd,
+        args: originalArgs.length ? originalArgs : void 0
+      };
+      changed = true;
+    }
+  }
+  if (changed) {
+    writeToml(configPath, config);
+    console.log(import_chalk.default.green("  \u2705 Unwrapped MCP servers in ~/.codex/config.toml"));
+  } else {
+    console.log(import_chalk.default.blue("  \u2139\uFE0F  No Node9-wrapped MCP servers found in ~/.codex/config.toml"));
+  }
+}
 function setupHud() {
   const homeDir2 = import_os11.default.homedir();
   const hooksPath = import_path15.default.join(homeDir2, ".claude", "settings.json");
@@ -8737,54 +9226,326 @@ function teardownHud() {
   console.log(import_chalk.default.green("  \u2705 node9 HUD removed from ~/.claude/settings.json"));
   console.log(import_chalk.default.gray("   Restart Claude Code for changes to take effect."));
 }
-
-// src/cli.ts
-init_daemon2();
-var import_chalk20 = __toESM(require("chalk"));
-var import_fs31 = __toESM(require("fs"));
-var import_path34 = __toESM(require("path"));
-var import_os27 = __toESM(require("os"));
-var import_prompts2 = require("@inquirer/prompts");
-
-// src/utils/duration.ts
-function parseDuration(str) {
-  const m = str.trim().match(/^(\d+(?:\.\d+)?)\s*(s|m|h|d)?$/i);
-  if (!m) return null;
-  const n = parseFloat(m[1]);
-  switch ((m[2] ?? "m").toLowerCase()) {
-    case "s":
-      return Math.round(n * 1e3);
-    case "m":
-      return Math.round(n * 6e4);
-    case "h":
-      return Math.round(n * 36e5);
-    case "d":
-      return Math.round(n * 864e5);
-    default:
-      return null;
+async function setupWindsurf() {
+  const homeDir2 = import_os11.default.homedir();
+  const mcpPath = import_path15.default.join(homeDir2, ".codeium", "windsurf", "mcp_config.json");
+  const mcpConfig = readJson(mcpPath) ?? {};
+  const servers = mcpConfig.mcpServers ?? {};
+  let anythingChanged = false;
+  if (!hasNode9McpServer(servers)) {
+    servers["node9"] = NODE9_MCP_SERVER_ENTRY;
+    mcpConfig.mcpServers = servers;
+    writeJson(mcpPath, mcpConfig);
+    console.log(import_chalk.default.green("  \u2705 node9 MCP server added   \u2192 node9 mcp-server"));
+    anythingChanged = true;
   }
-}
-
-// src/proxy/index.ts
-var import_readline = __toESM(require("readline"));
-var import_chalk4 = __toESM(require("chalk"));
-var import_child_process6 = require("child_process");
-var import_execa = require("execa");
-var import_execa2 = require("execa");
-init_orchestrator();
-
-// src/policy/negotiation.ts
-function buildNegotiationMessage(blockedByLabel, isHumanDecision, humanReason, recoveryCommand) {
-  if (isHumanDecision) {
-    return `NODE9: The human user rejected this action.
-REASON: ${humanReason || "No specific reason provided."}
-INSTRUCTIONS:
-- Do NOT retry this exact command.
-- Acknowledge the block to the user and ask if there is an alternative approach.
-- If you believe this action is critical, explain your reasoning and ask them to run "node9 pause 15m" to proceed.`;
+  const serversToWrap = [];
+  for (const [name, server] of Object.entries(servers)) {
+    if (!server.command || server.command === "node9") continue;
+    serversToWrap.push({ name, upstream: [server.command, ...server.args ?? []].join(" ") });
   }
-  const label = blockedByLabel.toLowerCase();
-  if (label.includes("dlp") || label.includes("secret detected") || label.includes("credential review")) {
+  if (serversToWrap.length > 0) {
+    console.log(import_chalk.default.bold("The following existing entries will be modified:\n"));
+    console.log(import_chalk.default.white(`  ${mcpPath}`));
+    for (const { name, upstream } of serversToWrap) {
+      console.log(import_chalk.default.gray(`    \u2022 ${name}: "${upstream}" \u2192 node9 mcp --upstream "${upstream}"`));
+    }
+    console.log("");
+    const proceed = await (0, import_prompts.confirm)({ message: "Wrap these MCP servers?", default: true });
+    if (proceed) {
+      for (const { name, upstream } of serversToWrap) {
+        servers[name] = {
+          ...servers[name],
+          command: "node9",
+          args: ["mcp", "--upstream", upstream]
+        };
+      }
+      mcpConfig.mcpServers = servers;
+      writeJson(mcpPath, mcpConfig);
+      console.log(import_chalk.default.green(`
+  \u2705 ${serversToWrap.length} MCP server(s) wrapped`));
+      anythingChanged = true;
+    } else {
+      console.log(import_chalk.default.yellow("  Skipped MCP server wrapping."));
+    }
+    console.log("");
+  }
+  console.log(
+    import_chalk.default.yellow(
+      "  \u26A0\uFE0F  Note: Windsurf does not yet support native pre-execution hooks.\n     MCP proxy wrapping is the only supported protection mode for Windsurf."
+    )
+  );
+  console.log("");
+  if (!anythingChanged && serversToWrap.length === 0) {
+    console.log(import_chalk.default.blue("\u2139\uFE0F  Node9 is already fully configured for Windsurf."));
+    printDaemonTip();
+    return;
+  }
+  if (anythingChanged) {
+    console.log(import_chalk.default.green.bold("\u{1F6E1}\uFE0F  Node9 is now protecting Windsurf via MCP proxy!"));
+    console.log(import_chalk.default.gray("    Restart Windsurf for changes to take effect."));
+    printDaemonTip();
+  }
+}
+function teardownWindsurf() {
+  const homeDir2 = import_os11.default.homedir();
+  const mcpPath = import_path15.default.join(homeDir2, ".codeium", "windsurf", "mcp_config.json");
+  const mcpConfig = readJson(mcpPath);
+  if (!mcpConfig?.mcpServers) {
+    console.log(
+      import_chalk.default.blue("  \u2139\uFE0F  ~/.codeium/windsurf/mcp_config.json not found \u2014 nothing to remove")
+    );
+    return;
+  }
+  let changed = false;
+  if (removeNode9McpServer(mcpConfig.mcpServers)) {
+    changed = true;
+    console.log(
+      import_chalk.default.green("  \u2705 Removed node9 MCP server entry from ~/.codeium/windsurf/mcp_config.json")
+    );
+  }
+  for (const [name, server] of Object.entries(mcpConfig.mcpServers)) {
+    const args = server.args;
+    if (server.command === "node9" && Array.isArray(args) && args[0] === "mcp" && args[1] === "--upstream" && typeof args[2] === "string") {
+      const [originalCmd, ...originalArgs] = args[2].split(" ");
+      mcpConfig.mcpServers[name] = {
+        ...server,
+        command: originalCmd,
+        args: originalArgs.length ? originalArgs : void 0
+      };
+      changed = true;
+    }
+  }
+  if (changed) {
+    writeJson(mcpPath, mcpConfig);
+    console.log(import_chalk.default.green("  \u2705 Unwrapped MCP servers in ~/.codeium/windsurf/mcp_config.json"));
+  } else {
+    console.log(
+      import_chalk.default.blue("  \u2139\uFE0F  No Node9-wrapped MCP servers found in ~/.codeium/windsurf/mcp_config.json")
+    );
+  }
+}
+function hasNode9McpServerVSCode(servers) {
+  const entry = servers["node9"];
+  return !!entry && entry.command === "node9" && Array.isArray(entry.args) && entry.args[0] === "mcp-server";
+}
+async function setupVSCode() {
+  const homeDir2 = import_os11.default.homedir();
+  const mcpPath = import_path15.default.join(homeDir2, ".vscode", "mcp.json");
+  const mcpConfig = readJson(mcpPath) ?? {};
+  const servers = mcpConfig.servers ?? {};
+  let anythingChanged = false;
+  if (!hasNode9McpServerVSCode(servers)) {
+    servers["node9"] = { type: "stdio", command: "node9", args: ["mcp-server"] };
+    mcpConfig.servers = servers;
+    writeJson(mcpPath, mcpConfig);
+    console.log(import_chalk.default.green("  \u2705 node9 MCP server added   \u2192 node9 mcp-server"));
+    anythingChanged = true;
+  }
+  const serversToWrap = [];
+  for (const [name, server] of Object.entries(servers)) {
+    if (!server.command || server.command === "node9") continue;
+    serversToWrap.push({ name, upstream: [server.command, ...server.args ?? []].join(" ") });
+  }
+  if (serversToWrap.length > 0) {
+    console.log(import_chalk.default.bold("The following existing entries will be modified:\n"));
+    console.log(import_chalk.default.white(`  ${mcpPath}`));
+    for (const { name, upstream } of serversToWrap) {
+      console.log(import_chalk.default.gray(`    \u2022 ${name}: "${upstream}" \u2192 node9 mcp --upstream "${upstream}"`));
+    }
+    console.log("");
+    const proceed = await (0, import_prompts.confirm)({ message: "Wrap these MCP servers?", default: true });
+    if (proceed) {
+      for (const { name, upstream } of serversToWrap) {
+        servers[name] = {
+          ...servers[name],
+          type: "stdio",
+          command: "node9",
+          args: ["mcp", "--upstream", upstream]
+        };
+      }
+      mcpConfig.servers = servers;
+      writeJson(mcpPath, mcpConfig);
+      console.log(import_chalk.default.green(`
+  \u2705 ${serversToWrap.length} MCP server(s) wrapped`));
+      anythingChanged = true;
+    } else {
+      console.log(import_chalk.default.yellow("  Skipped MCP server wrapping."));
+    }
+    console.log("");
+  }
+  console.log(
+    import_chalk.default.yellow(
+      "  \u26A0\uFE0F  Note: VSCode MCP support requires the GitHub Copilot extension (v1.99+).\n     Pre-execution hooks are not supported \u2014 MCP proxy wrapping only."
+    )
+  );
+  console.log("");
+  if (!anythingChanged && serversToWrap.length === 0) {
+    console.log(import_chalk.default.blue("\u2139\uFE0F  Node9 is already fully configured for VSCode."));
+    printDaemonTip();
+    return;
+  }
+  if (anythingChanged) {
+    console.log(import_chalk.default.green.bold("\u{1F6E1}\uFE0F  Node9 is now protecting VSCode via MCP proxy!"));
+    console.log(import_chalk.default.gray("    Restart VSCode for changes to take effect."));
+    printDaemonTip();
+  }
+}
+function teardownVSCode() {
+  const homeDir2 = import_os11.default.homedir();
+  const mcpPath = import_path15.default.join(homeDir2, ".vscode", "mcp.json");
+  const mcpConfig = readJson(mcpPath);
+  if (!mcpConfig?.servers) {
+    console.log(import_chalk.default.blue("  \u2139\uFE0F  ~/.vscode/mcp.json not found \u2014 nothing to remove"));
+    return;
+  }
+  let changed = false;
+  if (hasNode9McpServerVSCode(mcpConfig.servers)) {
+    delete mcpConfig.servers["node9"];
+    changed = true;
+    console.log(import_chalk.default.green("  \u2705 Removed node9 MCP server entry from ~/.vscode/mcp.json"));
+  }
+  for (const [name, server] of Object.entries(mcpConfig.servers)) {
+    const args = server.args;
+    if (server.command === "node9" && Array.isArray(args) && args[0] === "mcp" && args[1] === "--upstream" && typeof args[2] === "string") {
+      const [originalCmd, ...originalArgs] = args[2].split(" ");
+      mcpConfig.servers[name] = {
+        ...server,
+        type: "stdio",
+        command: originalCmd,
+        args: originalArgs.length ? originalArgs : void 0
+      };
+      changed = true;
+    }
+  }
+  if (changed) {
+    writeJson(mcpPath, mcpConfig);
+    console.log(import_chalk.default.green("  \u2705 Unwrapped MCP servers in ~/.vscode/mcp.json"));
+  } else {
+    console.log(import_chalk.default.blue("  \u2139\uFE0F  No Node9-wrapped MCP servers found in ~/.vscode/mcp.json"));
+  }
+}
+function getAgentsStatus(homeDir2 = import_os11.default.homedir()) {
+  const detected = detectAgents(homeDir2);
+  const claudeWired = (() => {
+    const settings = readJson(import_path15.default.join(homeDir2, ".claude", "settings.json"));
+    return !!settings?.hooks?.PreToolUse?.some((m) => m.hooks.some((h) => isNode9Hook(h.command)));
+  })();
+  const geminiWired = (() => {
+    const settings = readJson(import_path15.default.join(homeDir2, ".gemini", "settings.json"));
+    return !!settings?.hooks?.BeforeTool?.some((m) => m.hooks.some((h) => isNode9Hook(h.command)));
+  })();
+  const cursorWired = (() => {
+    const cfg = readJson(import_path15.default.join(homeDir2, ".cursor", "mcp.json"));
+    return !!(cfg?.mcpServers && hasNode9McpServer(cfg.mcpServers));
+  })();
+  const codexWired = (() => {
+    const cfg = readToml(import_path15.default.join(homeDir2, ".codex", "config.toml"));
+    return !!(cfg?.mcp_servers && hasNode9McpServer(cfg.mcp_servers));
+  })();
+  const windsurfWired = (() => {
+    const cfg = readJson(
+      import_path15.default.join(homeDir2, ".codeium", "windsurf", "mcp_config.json")
+    );
+    return !!(cfg?.mcpServers && hasNode9McpServer(cfg.mcpServers));
+  })();
+  const vscodeWired = (() => {
+    const cfg = readJson(import_path15.default.join(homeDir2, ".vscode", "mcp.json"));
+    return !!(cfg?.servers && hasNode9McpServerVSCode(cfg.servers));
+  })();
+  return [
+    {
+      name: "claude",
+      label: "Claude Code",
+      installed: detected.claude,
+      wired: claudeWired,
+      mode: detected.claude ? "hooks" : null
+    },
+    {
+      name: "gemini",
+      label: "Gemini CLI",
+      installed: detected.gemini,
+      wired: geminiWired,
+      mode: detected.gemini ? "hooks" : null
+    },
+    {
+      name: "cursor",
+      label: "Cursor",
+      installed: detected.cursor,
+      wired: cursorWired,
+      mode: detected.cursor ? "mcp" : null
+    },
+    {
+      name: "windsurf",
+      label: "Windsurf",
+      installed: detected.windsurf,
+      wired: windsurfWired,
+      mode: detected.windsurf ? "mcp" : null
+    },
+    {
+      name: "vscode",
+      label: "VSCode",
+      installed: detected.vscode,
+      wired: vscodeWired,
+      mode: detected.vscode ? "mcp" : null
+    },
+    {
+      name: "codex",
+      label: "Codex",
+      installed: detected.codex,
+      wired: codexWired,
+      mode: detected.codex ? "mcp" : null
+    }
+  ];
+}
+
+// src/cli.ts
+init_daemon2();
+var import_chalk24 = __toESM(require("chalk"));
+var import_fs35 = __toESM(require("fs"));
+var import_path38 = __toESM(require("path"));
+var import_os31 = __toESM(require("os"));
+var import_prompts2 = require("@inquirer/prompts");
+
+// src/utils/duration.ts
+function parseDuration(str) {
+  const m = str.trim().match(/^(\d+(?:\.\d+)?)\s*(s|m|h|d)?$/i);
+  if (!m) return null;
+  const n = parseFloat(m[1]);
+  switch ((m[2] ?? "m").toLowerCase()) {
+    case "s":
+      return Math.round(n * 1e3);
+    case "m":
+      return Math.round(n * 6e4);
+    case "h":
+      return Math.round(n * 36e5);
+    case "d":
+      return Math.round(n * 864e5);
+    default:
+      return null;
+  }
+}
+
+// src/proxy/index.ts
+var import_readline = __toESM(require("readline"));
+var import_chalk4 = __toESM(require("chalk"));
+var import_child_process7 = require("child_process");
+var import_execa = require("execa");
+var import_execa2 = require("execa");
+init_orchestrator();
+
+// src/policy/negotiation.ts
+function buildNegotiationMessage(blockedByLabel, isHumanDecision, humanReason, recoveryCommand) {
+  if (isHumanDecision) {
+    return `NODE9: The human user rejected this action.
+REASON: ${humanReason || "No specific reason provided."}
+INSTRUCTIONS:
+- Do NOT retry this exact command.
+- Acknowledge the block to the user and ask if there is an alternative approach.
+- If you believe this action is critical, explain your reasoning and ask them to run "node9 pause 15m" to proceed.`;
+  }
+  const label = blockedByLabel.toLowerCase();
+  if (label.includes("dlp") || label.includes("secret detected") || label.includes("credential review")) {
     return `NODE9 SECURITY ALERT: A sensitive credential (API key, token, or private key) was found in your tool call arguments.
 CRITICAL INSTRUCTION: Do NOT retry this action.
 REQUIRED ACTIONS:
@@ -8856,11 +9617,11 @@ async function runProxy(targetCommand) {
   }
   console.error(import_chalk4.default.green(`\u{1F680} Node9 Proxy Active: Monitoring [${targetCommand}]`));
   const spawnEnv = { ...process.env, FORCE_COLOR: "1" };
-  const child = useShell ? (0, import_child_process6.spawn)("/bin/bash", ["-c", targetCommand], {
+  const child = useShell ? (0, import_child_process7.spawn)("/bin/bash", ["-c", targetCommand], {
     stdio: ["pipe", "pipe", "inherit"],
     shell: false,
     env: spawnEnv
-  }) : (0, import_child_process6.spawn)(executable, args, { stdio: ["pipe", "pipe", "inherit"], shell: false, env: spawnEnv });
+  }) : (0, import_child_process7.spawn)(executable, args, { stdio: ["pipe", "pipe", "inherit"], shell: false, env: spawnEnv });
   const agentIn = import_readline.default.createInterface({ input: process.stdin, terminal: false });
   agentIn.on("line", async (line) => {
     let message;
@@ -8924,22 +9685,22 @@ async function runProxy(targetCommand) {
 }
 
 // src/cli/daemon-starter.ts
-var import_child_process7 = require("child_process");
+var import_child_process8 = require("child_process");
 init_daemon();
 function openBrowserLocal() {
   const url = `http://${DAEMON_HOST}:${DAEMON_PORT}/`;
   try {
     const opts = { stdio: "ignore" };
-    if (process.platform === "darwin") (0, import_child_process7.execSync)(`open "${url}"`, opts);
-    else if (process.platform === "win32") (0, import_child_process7.execSync)(`cmd /c start "" "${url}"`, opts);
-    else (0, import_child_process7.execSync)(`xdg-open "${url}"`, opts);
+    if (process.platform === "darwin") (0, import_child_process8.execSync)(`open "${url}"`, opts);
+    else if (process.platform === "win32") (0, import_child_process8.execSync)(`cmd /c start "" "${url}"`, opts);
+    else (0, import_child_process8.execSync)(`xdg-open "${url}"`, opts);
   } catch {
   }
 }
 async function autoStartDaemonAndWait() {
   if (process.env.NODE9_TESTING === "1") return false;
   try {
-    const child = (0, import_child_process7.spawn)(process.execPath, [process.argv[1], "daemon"], {
+    const child = (0, import_child_process8.spawn)(process.execPath, [process.argv[1], "daemon"], {
       detached: true,
       stdio: "ignore",
       // NODE9_BROWSER_OPENED=1 tells the daemon we will open the browser ourselves
@@ -8968,23 +9729,23 @@ async function autoStartDaemonAndWait() {
 
 // src/cli/commands/check.ts
 var import_chalk5 = __toESM(require("chalk"));
-var import_fs20 = __toESM(require("fs"));
-var import_child_process9 = require("child_process");
-var import_path22 = __toESM(require("path"));
-var import_os16 = __toESM(require("os"));
+var import_fs22 = __toESM(require("fs"));
+var import_child_process10 = require("child_process");
+var import_path24 = __toESM(require("path"));
+var import_os18 = __toESM(require("os"));
 init_orchestrator();
 init_daemon();
 init_config();
 init_policy();
 
 // src/undo.ts
-var import_child_process8 = require("child_process");
+var import_child_process9 = require("child_process");
 var import_crypto8 = __toESM(require("crypto"));
-var import_fs19 = __toESM(require("fs"));
+var import_fs21 = __toESM(require("fs"));
 var import_net3 = __toESM(require("net"));
-var import_path21 = __toESM(require("path"));
-var import_os15 = __toESM(require("os"));
-var ACTIVITY_SOCKET_PATH3 = process.platform === "win32" ? "\\\\.\\pipe\\node9-activity" : import_path21.default.join(import_os15.default.tmpdir(), "node9-activity.sock");
+var import_path23 = __toESM(require("path"));
+var import_os17 = __toESM(require("os"));
+var ACTIVITY_SOCKET_PATH3 = process.platform === "win32" ? "\\\\.\\pipe\\node9-activity" : import_path23.default.join(import_os17.default.tmpdir(), "node9-activity.sock");
 function notifySnapshotTaken(hash, tool, argsSummary, fileCount) {
   try {
     const payload = JSON.stringify({
@@ -9004,22 +9765,22 @@ function notifySnapshotTaken(hash, tool, argsSummary, fileCount) {
   } catch {
   }
 }
-var SNAPSHOT_STACK_PATH = import_path21.default.join(import_os15.default.homedir(), ".node9", "snapshots.json");
-var UNDO_LATEST_PATH = import_path21.default.join(import_os15.default.homedir(), ".node9", "undo_latest.txt");
+var SNAPSHOT_STACK_PATH = import_path23.default.join(import_os17.default.homedir(), ".node9", "snapshots.json");
+var UNDO_LATEST_PATH = import_path23.default.join(import_os17.default.homedir(), ".node9", "undo_latest.txt");
 var MAX_SNAPSHOTS = 10;
 var GIT_TIMEOUT = 15e3;
 function readStack() {
   try {
-    if (import_fs19.default.existsSync(SNAPSHOT_STACK_PATH))
-      return JSON.parse(import_fs19.default.readFileSync(SNAPSHOT_STACK_PATH, "utf-8"));
+    if (import_fs21.default.existsSync(SNAPSHOT_STACK_PATH))
+      return JSON.parse(import_fs21.default.readFileSync(SNAPSHOT_STACK_PATH, "utf-8"));
   } catch {
   }
   return [];
 }
 function writeStack(stack) {
-  const dir = import_path21.default.dirname(SNAPSHOT_STACK_PATH);
-  if (!import_fs19.default.existsSync(dir)) import_fs19.default.mkdirSync(dir, { recursive: true });
-  import_fs19.default.writeFileSync(SNAPSHOT_STACK_PATH, JSON.stringify(stack, null, 2));
+  const dir = import_path23.default.dirname(SNAPSHOT_STACK_PATH);
+  if (!import_fs21.default.existsSync(dir)) import_fs21.default.mkdirSync(dir, { recursive: true });
+  import_fs21.default.writeFileSync(SNAPSHOT_STACK_PATH, JSON.stringify(stack, null, 2));
 }
 function extractFilePath(args) {
   if (!args || typeof args !== "object") return null;
@@ -9039,12 +9800,12 @@ function buildArgsSummary(tool, args) {
   return "";
 }
 function findProjectRoot(filePath) {
-  let dir = import_path21.default.dirname(filePath);
+  let dir = import_path23.default.dirname(filePath);
   while (true) {
-    if (import_fs19.default.existsSync(import_path21.default.join(dir, ".git")) || import_fs19.default.existsSync(import_path21.default.join(dir, "package.json"))) {
+    if (import_fs21.default.existsSync(import_path23.default.join(dir, ".git")) || import_fs21.default.existsSync(import_path23.default.join(dir, "package.json"))) {
       return dir;
     }
-    const parent = import_path21.default.dirname(dir);
+    const parent = import_path23.default.dirname(dir);
     if (parent === dir) return process.cwd();
     dir = parent;
   }
@@ -9052,7 +9813,7 @@ function findProjectRoot(filePath) {
 function normalizeCwdForHash(cwd) {
   let normalized;
   try {
-    normalized = import_fs19.default.realpathSync(cwd);
+    normalized = import_fs21.default.realpathSync(cwd);
   } catch {
     normalized = cwd;
   }
@@ -9062,16 +9823,16 @@ function normalizeCwdForHash(cwd) {
 }
 function getShadowRepoDir(cwd) {
   const hash = import_crypto8.default.createHash("sha256").update(normalizeCwdForHash(cwd)).digest("hex").slice(0, 16);
-  return import_path21.default.join(import_os15.default.homedir(), ".node9", "snapshots", hash);
+  return import_path23.default.join(import_os17.default.homedir(), ".node9", "snapshots", hash);
 }
 function cleanOrphanedIndexFiles(shadowDir) {
   try {
     const cutoff = Date.now() - 6e4;
-    for (const f of import_fs19.default.readdirSync(shadowDir)) {
+    for (const f of import_fs21.default.readdirSync(shadowDir)) {
       if (f.startsWith("index_")) {
-        const fp = import_path21.default.join(shadowDir, f);
+        const fp = import_path23.default.join(shadowDir, f);
         try {
-          if (import_fs19.default.statSync(fp).mtimeMs < cutoff) import_fs19.default.unlinkSync(fp);
+          if (import_fs21.default.statSync(fp).mtimeMs < cutoff) import_fs21.default.unlinkSync(fp);
         } catch {
         }
       }
@@ -9083,7 +9844,7 @@ function writeShadowExcludes(shadowDir, ignorePaths) {
   const hardcoded = [".git", ".node9"];
   const lines = [...hardcoded, ...ignorePaths].join("\n");
   try {
-    import_fs19.default.writeFileSync(import_path21.default.join(shadowDir, "info", "exclude"), lines + "\n", "utf8");
+    import_fs21.default.writeFileSync(import_path23.default.join(shadowDir, "info", "exclude"), lines + "\n", "utf8");
   } catch {
   }
 }
@@ -9091,54 +9852,54 @@ function ensureShadowRepo(shadowDir, cwd) {
   cleanOrphanedIndexFiles(shadowDir);
   const normalizedCwd = normalizeCwdForHash(cwd);
   const shadowEnvBase = { ...process.env, GIT_DIR: shadowDir, GIT_WORK_TREE: cwd };
-  const check = (0, import_child_process8.spawnSync)("git", ["rev-parse", "--git-dir"], {
+  const check = (0, import_child_process9.spawnSync)("git", ["rev-parse", "--git-dir"], {
     env: shadowEnvBase,
     timeout: 3e3
   });
   if (check.status === 0) {
-    const ptPath = import_path21.default.join(shadowDir, "project-path.txt");
+    const ptPath = import_path23.default.join(shadowDir, "project-path.txt");
     try {
-      const stored = import_fs19.default.readFileSync(ptPath, "utf8").trim();
+      const stored = import_fs21.default.readFileSync(ptPath, "utf8").trim();
       if (stored === normalizedCwd) return true;
       if (process.env.NODE9_DEBUG === "1")
         console.error(
           `[Node9] Shadow repo path mismatch: stored="${stored}" expected="${normalizedCwd}" \u2014 reinitializing`
         );
-      import_fs19.default.rmSync(shadowDir, { recursive: true, force: true });
+      import_fs21.default.rmSync(shadowDir, { recursive: true, force: true });
     } catch {
       try {
-        import_fs19.default.writeFileSync(ptPath, normalizedCwd, "utf8");
+        import_fs21.default.writeFileSync(ptPath, normalizedCwd, "utf8");
       } catch {
       }
       return true;
     }
   }
   try {
-    import_fs19.default.mkdirSync(shadowDir, { recursive: true });
+    import_fs21.default.mkdirSync(shadowDir, { recursive: true });
   } catch {
   }
-  const init = (0, import_child_process8.spawnSync)("git", ["init", "--bare", shadowDir], { timeout: 5e3 });
+  const init = (0, import_child_process9.spawnSync)("git", ["init", "--bare", shadowDir], { timeout: 5e3 });
   if (init.status !== 0 || init.error) {
     const reason = init.error ? init.error.message : init.stderr?.toString();
     if (process.env.NODE9_DEBUG === "1") console.error("[Node9] git init --bare failed:", reason);
     return false;
   }
-  const configFile = import_path21.default.join(shadowDir, "config");
-  (0, import_child_process8.spawnSync)("git", ["config", "--file", configFile, "core.untrackedCache", "true"], {
+  const configFile = import_path23.default.join(shadowDir, "config");
+  (0, import_child_process9.spawnSync)("git", ["config", "--file", configFile, "core.untrackedCache", "true"], {
     timeout: 3e3
   });
-  (0, import_child_process8.spawnSync)("git", ["config", "--file", configFile, "core.fsmonitor", "true"], {
+  (0, import_child_process9.spawnSync)("git", ["config", "--file", configFile, "core.fsmonitor", "true"], {
     timeout: 3e3
   });
   try {
-    import_fs19.default.writeFileSync(import_path21.default.join(shadowDir, "project-path.txt"), normalizedCwd, "utf8");
+    import_fs21.default.writeFileSync(import_path23.default.join(shadowDir, "project-path.txt"), normalizedCwd, "utf8");
   } catch {
   }
   return true;
 }
 function buildGitEnv(cwd) {
   const shadowDir = getShadowRepoDir(cwd);
-  const check = (0, import_child_process8.spawnSync)("git", ["rev-parse", "--git-dir"], {
+  const check = (0, import_child_process9.spawnSync)("git", ["rev-parse", "--git-dir"], {
     env: { ...process.env, GIT_DIR: shadowDir, GIT_WORK_TREE: cwd },
     timeout: 2e3
   });
@@ -9151,23 +9912,23 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
   let indexFile = null;
   try {
     const rawFilePath = extractFilePath(args);
-    const absFilePath = rawFilePath && import_path21.default.isAbsolute(rawFilePath) ? rawFilePath : null;
+    const absFilePath = rawFilePath && import_path23.default.isAbsolute(rawFilePath) ? rawFilePath : null;
     const cwd = absFilePath ? findProjectRoot(absFilePath) : process.cwd();
     const shadowDir = getShadowRepoDir(cwd);
     if (!ensureShadowRepo(shadowDir, cwd)) return null;
     writeShadowExcludes(shadowDir, ignorePaths);
-    indexFile = import_path21.default.join(shadowDir, `index_${process.pid}_${Date.now()}`);
+    indexFile = import_path23.default.join(shadowDir, `index_${process.pid}_${Date.now()}`);
     const shadowEnv = {
       ...process.env,
       GIT_DIR: shadowDir,
       GIT_WORK_TREE: cwd,
       GIT_INDEX_FILE: indexFile
     };
-    (0, import_child_process8.spawnSync)("git", ["add", "-A"], { env: shadowEnv, timeout: GIT_TIMEOUT });
-    const treeRes = (0, import_child_process8.spawnSync)("git", ["write-tree"], { env: shadowEnv, timeout: GIT_TIMEOUT });
+    (0, import_child_process9.spawnSync)("git", ["add", "-A"], { env: shadowEnv, timeout: GIT_TIMEOUT });
+    const treeRes = (0, import_child_process9.spawnSync)("git", ["write-tree"], { env: shadowEnv, timeout: GIT_TIMEOUT });
     const treeHash = treeRes.stdout?.toString().trim();
     if (!treeHash || treeRes.status !== 0) return null;
-    const commitRes = (0, import_child_process8.spawnSync)(
+    const commitRes = (0, import_child_process9.spawnSync)(
       "git",
       ["commit-tree", treeHash, "-m", `Node9 AI Snapshot: ${(/* @__PURE__ */ new Date()).toISOString()}`],
       { env: shadowEnv, timeout: GIT_TIMEOUT }
@@ -9179,7 +9940,7 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
     let capturedFiles = [];
     let capturedDiff = null;
     if (prevEntry) {
-      const filesRes = (0, import_child_process8.spawnSync)("git", ["diff", "--name-only", prevEntry.hash, commitHash], {
+      const filesRes = (0, import_child_process9.spawnSync)("git", ["diff", "--name-only", prevEntry.hash, commitHash], {
         env: shadowEnv,
         timeout: GIT_TIMEOUT
       });
@@ -9189,7 +9950,7 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
       if (capturedFiles.length === 0) {
         return prevEntry.hash;
       }
-      const diffRes = (0, import_child_process8.spawnSync)("git", ["diff", prevEntry.hash, commitHash], {
+      const diffRes = (0, import_child_process9.spawnSync)("git", ["diff", prevEntry.hash, commitHash], {
         env: shadowEnv,
         timeout: GIT_TIMEOUT
       });
@@ -9197,7 +9958,7 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
         capturedDiff = diffRes.stdout?.toString() || null;
       }
     } else {
-      const filesRes = (0, import_child_process8.spawnSync)("git", ["ls-tree", "-r", "--name-only", commitHash], {
+      const filesRes = (0, import_child_process9.spawnSync)("git", ["ls-tree", "-r", "--name-only", commitHash], {
         env: shadowEnv,
         timeout: GIT_TIMEOUT
       });
@@ -9228,9 +9989,9 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
     writeStack(stack);
     const entry = stack[stack.length - 1];
     notifySnapshotTaken(commitHash.slice(0, 7), tool, entry.argsSummary, capturedFiles.length);
-    import_fs19.default.writeFileSync(UNDO_LATEST_PATH, commitHash);
+    import_fs21.default.writeFileSync(UNDO_LATEST_PATH, commitHash);
     if (shouldGc) {
-      (0, import_child_process8.spawn)("git", ["gc", "--auto"], { env: shadowEnv, detached: true, stdio: "ignore" }).unref();
+      (0, import_child_process9.spawn)("git", ["gc", "--auto"], { env: shadowEnv, detached: true, stdio: "ignore" }).unref();
     }
     return commitHash;
   } catch (err2) {
@@ -9239,7 +10000,7 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
   } finally {
     if (indexFile) {
       try {
-        import_fs19.default.unlinkSync(indexFile);
+        import_fs21.default.unlinkSync(indexFile);
       } catch {
       }
     }
@@ -9251,14 +10012,14 @@ function getSnapshotHistory() {
 function computeUndoDiff(hash, cwd) {
   try {
     const env = buildGitEnv(cwd);
-    const statRes = (0, import_child_process8.spawnSync)("git", ["diff", hash, "--stat", "--", "."], {
+    const statRes = (0, import_child_process9.spawnSync)("git", ["diff", hash, "--stat", "--", "."], {
       cwd,
       env,
       timeout: GIT_TIMEOUT
     });
     const stat = statRes.stdout?.toString().trim();
     if (!stat || statRes.status !== 0) return null;
-    const diffRes = (0, import_child_process8.spawnSync)("git", ["diff", hash, "--", "."], {
+    const diffRes = (0, import_child_process9.spawnSync)("git", ["diff", hash, "--", "."], {
       cwd,
       env,
       timeout: GIT_TIMEOUT
@@ -9277,7 +10038,7 @@ function applyUndo(hash, cwd) {
   try {
     const dir = cwd ?? process.cwd();
     const env = buildGitEnv(dir);
-    const restore = (0, import_child_process8.spawnSync)("git", ["restore", "--source", hash, "--staged", "--worktree", "."], {
+    const restore = (0, import_child_process9.spawnSync)("git", ["restore", "--source", hash, "--staged", "--worktree", "."], {
       cwd: dir,
       env,
       timeout: GIT_TIMEOUT
@@ -9289,7 +10050,7 @@ function applyUndo(hash, cwd) {
       }
       return false;
     }
-    const lsTree = (0, import_child_process8.spawnSync)("git", ["ls-tree", "-r", "--name-only", hash], {
+    const lsTree = (0, import_child_process9.spawnSync)("git", ["ls-tree", "-r", "--name-only", hash], {
       cwd: dir,
       env,
       timeout: GIT_TIMEOUT
@@ -9308,16 +10069,16 @@ function applyUndo(hash, cwd) {
 `);
       return false;
     }
-    const tracked = (0, import_child_process8.spawnSync)("git", ["ls-files"], { cwd: dir, env, timeout: GIT_TIMEOUT }).stdout?.toString().trim().split("\n").filter(Boolean) ?? [];
-    const untracked = (0, import_child_process8.spawnSync)("git", ["ls-files", "--others", "--exclude-standard"], {
+    const tracked = (0, import_child_process9.spawnSync)("git", ["ls-files"], { cwd: dir, env, timeout: GIT_TIMEOUT }).stdout?.toString().trim().split("\n").filter(Boolean) ?? [];
+    const untracked = (0, import_child_process9.spawnSync)("git", ["ls-files", "--others", "--exclude-standard"], {
       cwd: dir,
       env,
       timeout: GIT_TIMEOUT
     }).stdout?.toString().trim().split("\n").filter(Boolean) ?? [];
     for (const file of [...tracked, ...untracked]) {
-      const fullPath = import_path21.default.join(dir, file);
-      if (!snapshotFiles.has(file) && import_fs19.default.existsSync(fullPath)) {
-        import_fs19.default.unlinkSync(fullPath);
+      const fullPath = import_path23.default.join(dir, file);
+      if (!snapshotFiles.has(file) && import_fs21.default.existsSync(fullPath)) {
+        import_fs21.default.unlinkSync(fullPath);
       }
     }
     return true;
@@ -9341,9 +10102,9 @@ function registerCheckCommand(program2) {
         } catch (err2) {
           const tempConfig = getConfig();
           if (process.env.NODE9_DEBUG === "1" || tempConfig.settings.enableHookLogDebug) {
-            const logPath = import_path22.default.join(import_os16.default.homedir(), ".node9", "hook-debug.log");
+            const logPath = import_path24.default.join(import_os18.default.homedir(), ".node9", "hook-debug.log");
             const errMsg = err2 instanceof Error ? err2.message : String(err2);
-            import_fs20.default.appendFileSync(
+            import_fs22.default.appendFileSync(
               logPath,
               `[${(/* @__PURE__ */ new Date()).toISOString()}] JSON_PARSE_ERROR: ${errMsg}
 RAW: ${raw}
@@ -9356,11 +10117,11 @@ RAW: ${raw}
         if (config.settings.autoStartDaemon && !isDaemonRunning() && !process.env.NODE9_NO_AUTO_DAEMON) {
           try {
             const scriptPath = process.argv[1];
-            if (typeof scriptPath !== "string" || !import_path22.default.isAbsolute(scriptPath))
+            if (typeof scriptPath !== "string" || !import_path24.default.isAbsolute(scriptPath))
               throw new Error("node9: argv[1] is not an absolute path");
-            const resolvedScript = import_fs20.default.realpathSync(scriptPath);
-            const packageDist = import_fs20.default.realpathSync(import_path22.default.resolve(__dirname, "../.."));
-            if (!resolvedScript.startsWith(packageDist + import_path22.default.sep) && resolvedScript !== packageDist)
+            const resolvedScript = import_fs22.default.realpathSync(scriptPath);
+            const packageDist = import_fs22.default.realpathSync(import_path24.default.resolve(__dirname, "../.."));
+            if (!resolvedScript.startsWith(packageDist + import_path24.default.sep) && resolvedScript !== packageDist)
               throw new Error(
                 `node9: daemon spawn aborted \u2014 argv[1] (${resolvedScript}) is outside package dist (${packageDist})`
               );
@@ -9375,17 +10136,17 @@ RAW: ${raw}
             ]) {
               delete safeEnv[key];
             }
-            const d = (0, import_child_process9.spawn)(process.execPath, [scriptPath, "daemon"], {
+            const d = (0, import_child_process10.spawn)(process.execPath, [scriptPath, "daemon"], {
               detached: true,
               stdio: "ignore",
               env: { ...safeEnv, NODE9_AUTO_STARTED: "1", NODE9_BROWSER_OPENED: "1" }
             });
             d.unref();
           } catch (spawnErr) {
-            const logPath = import_path22.default.join(import_os16.default.homedir(), ".node9", "hook-debug.log");
+            const logPath = import_path24.default.join(import_os18.default.homedir(), ".node9", "hook-debug.log");
             const msg = spawnErr instanceof Error ? spawnErr.message : String(spawnErr);
             try {
-              import_fs20.default.appendFileSync(
+              import_fs22.default.appendFileSync(
                 logPath,
                 `[${(/* @__PURE__ */ new Date()).toISOString()}] daemon-autostart-failed: ${msg}
 `
@@ -9395,10 +10156,10 @@ RAW: ${raw}
           }
         }
         if (process.env.NODE9_DEBUG === "1" || config.settings.enableHookLogDebug) {
-          const logPath = import_path22.default.join(import_os16.default.homedir(), ".node9", "hook-debug.log");
-          if (!import_fs20.default.existsSync(import_path22.default.dirname(logPath)))
-            import_fs20.default.mkdirSync(import_path22.default.dirname(logPath), { recursive: true });
-          import_fs20.default.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] STDIN: ${raw}
+          const logPath = import_path24.default.join(import_os18.default.homedir(), ".node9", "hook-debug.log");
+          if (!import_fs22.default.existsSync(import_path24.default.dirname(logPath)))
+            import_fs22.default.mkdirSync(import_path24.default.dirname(logPath), { recursive: true });
+          import_fs22.default.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] STDIN: ${raw}
 `);
         }
         const toolName = sanitize2(payload.tool_name ?? payload.name ?? "");
@@ -9411,8 +10172,8 @@ RAW: ${raw}
           const isHumanDecision = blockedByContext.toLowerCase().includes("user") || blockedByContext.toLowerCase().includes("daemon") || blockedByContext.toLowerCase().includes("decision");
           let ttyFd = null;
           try {
-            ttyFd = import_fs20.default.openSync("/dev/tty", "w");
-            const writeTty = (line) => import_fs20.default.writeSync(ttyFd, line + "\n");
+            ttyFd = import_fs22.default.openSync("/dev/tty", "w");
+            const writeTty = (line) => import_fs22.default.writeSync(ttyFd, line + "\n");
             if (blockedByContext.includes("DLP") || blockedByContext.includes("Secret Detected") || blockedByContext.includes("Credential Review")) {
               writeTty(import_chalk5.default.bgRed.white.bold(`
  \u{1F6A8} NODE9 DLP ALERT \u2014 CREDENTIAL DETECTED `));
@@ -9431,7 +10192,7 @@ RAW: ${raw}
           } finally {
             if (ttyFd !== null)
               try {
-                import_fs20.default.closeSync(ttyFd);
+                import_fs22.default.closeSync(ttyFd);
               } catch {
               }
           }
@@ -9463,7 +10224,7 @@ RAW: ${raw}
         if (shouldSnapshot(toolName, toolInput, config)) {
           await createShadowSnapshot(toolName, toolInput, config.policy.snapshot.ignorePaths);
         }
-        const safeCwdForAuth = typeof payload.cwd === "string" && import_path22.default.isAbsolute(payload.cwd) ? payload.cwd : void 0;
+        const safeCwdForAuth = typeof payload.cwd === "string" && import_path24.default.isAbsolute(payload.cwd) ? payload.cwd : void 0;
         const result = await authorizeHeadless(toolName, toolInput, meta, {
           cwd: safeCwdForAuth
         });
@@ -9475,12 +10236,12 @@ RAW: ${raw}
         }
         if (result.noApprovalMechanism && !isDaemonRunning() && !process.env.NODE9_NO_AUTO_DAEMON && !process.stdout.isTTY && config.settings.autoStartDaemon) {
           try {
-            const tty = import_fs20.default.openSync("/dev/tty", "w");
-            import_fs20.default.writeSync(
+            const tty = import_fs22.default.openSync("/dev/tty", "w");
+            import_fs22.default.writeSync(
               tty,
               import_chalk5.default.cyan("\n\u{1F6E1}\uFE0F  Node9: Starting approval daemon automatically...\n")
             );
-            import_fs20.default.closeSync(tty);
+            import_fs22.default.closeSync(tty);
           } catch {
           }
           const daemonReady = await autoStartDaemonAndWait();
@@ -9507,9 +10268,9 @@ RAW: ${raw}
         });
       } catch (err2) {
         if (process.env.NODE9_DEBUG === "1") {
-          const logPath = import_path22.default.join(import_os16.default.homedir(), ".node9", "hook-debug.log");
+          const logPath = import_path24.default.join(import_os18.default.homedir(), ".node9", "hook-debug.log");
           const errMsg = err2 instanceof Error ? err2.message : String(err2);
-          import_fs20.default.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] ERROR: ${errMsg}
+          import_fs22.default.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] ERROR: ${errMsg}
 `);
         }
         process.exit(0);
@@ -9543,9 +10304,9 @@ RAW: ${raw}
 }
 
 // src/cli/commands/log.ts
-var import_fs21 = __toESM(require("fs"));
-var import_path23 = __toESM(require("path"));
-var import_os17 = __toESM(require("os"));
+var import_fs23 = __toESM(require("fs"));
+var import_path25 = __toESM(require("path"));
+var import_os19 = __toESM(require("os"));
 init_audit();
 init_config();
 init_policy();
@@ -9621,10 +10382,10 @@ function registerLogCommand(program2) {
           decision: "allowed",
           source: "post-hook"
         };
-        const logPath = import_path23.default.join(import_os17.default.homedir(), ".node9", "audit.log");
-        if (!import_fs21.default.existsSync(import_path23.default.dirname(logPath)))
-          import_fs21.default.mkdirSync(import_path23.default.dirname(logPath), { recursive: true });
-        import_fs21.default.appendFileSync(logPath, JSON.stringify(entry) + "\n");
+        const logPath = import_path25.default.join(import_os19.default.homedir(), ".node9", "audit.log");
+        if (!import_fs23.default.existsSync(import_path25.default.dirname(logPath)))
+          import_fs23.default.mkdirSync(import_path25.default.dirname(logPath), { recursive: true });
+        import_fs23.default.appendFileSync(logPath, JSON.stringify(entry) + "\n");
         if ((tool === "Bash" || tool === "bash") && isDaemonRunning()) {
           const command = typeof rawInput === "object" && rawInput !== null && "command" in rawInput && typeof rawInput.command === "string" ? rawInput.command : null;
           if (command) {
@@ -9657,7 +10418,7 @@ function registerLogCommand(program2) {
             }
           }
         }
-        const safeCwd = typeof payload.cwd === "string" && import_path23.default.isAbsolute(payload.cwd) ? payload.cwd : void 0;
+        const safeCwd = typeof payload.cwd === "string" && import_path25.default.isAbsolute(payload.cwd) ? payload.cwd : void 0;
         const config = getConfig(safeCwd);
         if (shouldSnapshot(tool, {}, config)) {
           await createShadowSnapshot("unknown", {}, config.policy.snapshot.ignorePaths);
@@ -9666,9 +10427,9 @@ function registerLogCommand(program2) {
         const msg = err2 instanceof Error ? err2.message : String(err2);
         process.stderr.write(`[Node9] audit log error: ${msg}
 `);
-        const debugPath = import_path23.default.join(import_os17.default.homedir(), ".node9", "hook-debug.log");
+        const debugPath = import_path25.default.join(import_os19.default.homedir(), ".node9", "hook-debug.log");
         try {
-          import_fs21.default.appendFileSync(debugPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] LOG_ERROR: ${msg}
+          import_fs23.default.appendFileSync(debugPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] LOG_ERROR: ${msg}
 `);
         } catch {
         }
@@ -9698,10 +10459,10 @@ init_audit();
 init_config();
 
 // src/utils/https-fetch.ts
-var import_https = __toESM(require("https"));
+var import_https2 = __toESM(require("https"));
 function httpsFetch(url) {
   return new Promise((resolve, reject) => {
-    import_https.default.get(url, (res) => {
+    import_https2.default.get(url, (res) => {
       if (res.statusCode !== 200) {
         reject(new Error(`HTTP ${String(res.statusCode)} for ${url}`));
         res.resume();
@@ -10068,14 +10829,14 @@ function registerConfigShowCommand(program2) {
 
 // src/cli/commands/doctor.ts
 var import_chalk7 = __toESM(require("chalk"));
-var import_fs22 = __toESM(require("fs"));
-var import_path24 = __toESM(require("path"));
-var import_os18 = __toESM(require("os"));
-var import_child_process10 = require("child_process");
+var import_fs24 = __toESM(require("fs"));
+var import_path26 = __toESM(require("path"));
+var import_os20 = __toESM(require("os"));
+var import_child_process11 = require("child_process");
 init_daemon();
 function registerDoctorCommand(program2, version2) {
   program2.command("doctor").description("Check that Node9 is installed and configured correctly").action(() => {
-    const homeDir2 = import_os18.default.homedir();
+    const homeDir2 = import_os20.default.homedir();
     let failures = 0;
     function pass(msg) {
       console.log(import_chalk7.default.green("  \u2705 ") + msg);
@@ -10097,7 +10858,7 @@ function registerDoctorCommand(program2, version2) {
 `));
     section("Binary");
     try {
-      const which = (0, import_child_process10.execSync)("which node9", { encoding: "utf-8", timeout: 3e3 }).trim();
+      const which = (0, import_child_process11.execSync)("which node9", { encoding: "utf-8", timeout: 3e3 }).trim();
       pass(`node9 found at ${which}`);
     } catch {
       warn(
@@ -10115,7 +10876,7 @@ function registerDoctorCommand(program2, version2) {
       );
     }
     try {
-      const gitVersion = (0, import_child_process10.execSync)("git --version", { encoding: "utf-8", timeout: 3e3 }).trim();
+      const gitVersion = (0, import_child_process11.execSync)("git --version", { encoding: "utf-8", timeout: 3e3 }).trim();
       pass(gitVersion);
     } catch {
       warn(
@@ -10124,10 +10885,10 @@ function registerDoctorCommand(program2, version2) {
       );
     }
     section("Configuration");
-    const globalConfigPath = import_path24.default.join(homeDir2, ".node9", "config.json");
-    if (import_fs22.default.existsSync(globalConfigPath)) {
+    const globalConfigPath = import_path26.default.join(homeDir2, ".node9", "config.json");
+    if (import_fs24.default.existsSync(globalConfigPath)) {
       try {
-        JSON.parse(import_fs22.default.readFileSync(globalConfigPath, "utf-8"));
+        JSON.parse(import_fs24.default.readFileSync(globalConfigPath, "utf-8"));
         pass("~/.node9/config.json found and valid");
       } catch {
         fail("~/.node9/config.json is invalid JSON", "Run: node9 init --force");
@@ -10135,10 +10896,10 @@ function registerDoctorCommand(program2, version2) {
     } else {
       warn("~/.node9/config.json not found (using defaults)", "Run: node9 init");
     }
-    const projectConfigPath = import_path24.default.join(process.cwd(), "node9.config.json");
-    if (import_fs22.default.existsSync(projectConfigPath)) {
+    const projectConfigPath = import_path26.default.join(process.cwd(), "node9.config.json");
+    if (import_fs24.default.existsSync(projectConfigPath)) {
       try {
-        JSON.parse(import_fs22.default.readFileSync(projectConfigPath, "utf-8"));
+        JSON.parse(import_fs24.default.readFileSync(projectConfigPath, "utf-8"));
         pass("node9.config.json found and valid (project)");
       } catch {
         fail(
@@ -10147,8 +10908,8 @@ function registerDoctorCommand(program2, version2) {
         );
       }
     }
-    const credsPath = import_path24.default.join(homeDir2, ".node9", "credentials.json");
-    if (import_fs22.default.existsSync(credsPath)) {
+    const credsPath = import_path26.default.join(homeDir2, ".node9", "credentials.json");
+    if (import_fs24.default.existsSync(credsPath)) {
       pass("Cloud credentials found (~/.node9/credentials.json)");
     } else {
       warn(
@@ -10157,10 +10918,10 @@ function registerDoctorCommand(program2, version2) {
       );
     }
     section("Agent Hooks");
-    const claudeSettingsPath = import_path24.default.join(homeDir2, ".claude", "settings.json");
-    if (import_fs22.default.existsSync(claudeSettingsPath)) {
+    const claudeSettingsPath = import_path26.default.join(homeDir2, ".claude", "settings.json");
+    if (import_fs24.default.existsSync(claudeSettingsPath)) {
       try {
-        const cs = JSON.parse(import_fs22.default.readFileSync(claudeSettingsPath, "utf-8"));
+        const cs = JSON.parse(import_fs24.default.readFileSync(claudeSettingsPath, "utf-8"));
         const hasHook = cs.hooks?.PreToolUse?.some(
           (m) => m.hooks.some((h) => h.command?.includes("node9") || h.command?.includes("cli.js"))
         );
@@ -10176,10 +10937,10 @@ function registerDoctorCommand(program2, version2) {
     } else {
       warn("Claude Code \u2014 not configured", "Run: node9 setup claude");
     }
-    const geminiSettingsPath = import_path24.default.join(homeDir2, ".gemini", "settings.json");
-    if (import_fs22.default.existsSync(geminiSettingsPath)) {
+    const geminiSettingsPath = import_path26.default.join(homeDir2, ".gemini", "settings.json");
+    if (import_fs24.default.existsSync(geminiSettingsPath)) {
       try {
-        const gs = JSON.parse(import_fs22.default.readFileSync(geminiSettingsPath, "utf-8"));
+        const gs = JSON.parse(import_fs24.default.readFileSync(geminiSettingsPath, "utf-8"));
         const hasHook = gs.hooks?.BeforeTool?.some(
           (m) => m.hooks.some((h) => h.command?.includes("node9") || h.command?.includes("cli.js"))
         );
@@ -10195,10 +10956,10 @@ function registerDoctorCommand(program2, version2) {
     } else {
       warn("Gemini CLI  \u2014 not configured", "Run: node9 setup gemini  (skip if not using Gemini)");
     }
-    const cursorHooksPath = import_path24.default.join(homeDir2, ".cursor", "hooks.json");
-    if (import_fs22.default.existsSync(cursorHooksPath)) {
+    const cursorHooksPath = import_path26.default.join(homeDir2, ".cursor", "hooks.json");
+    if (import_fs24.default.existsSync(cursorHooksPath)) {
       try {
-        const cur = JSON.parse(import_fs22.default.readFileSync(cursorHooksPath, "utf-8"));
+        const cur = JSON.parse(import_fs24.default.readFileSync(cursorHooksPath, "utf-8"));
         const hasHook = cur.hooks?.preToolUse?.some(
           (h) => h.command?.includes("node9") || h.command?.includes("cli.js")
         );
@@ -10236,9 +10997,9 @@ function registerDoctorCommand(program2, version2) {
 
 // src/cli/commands/audit.ts
 var import_chalk8 = __toESM(require("chalk"));
-var import_fs23 = __toESM(require("fs"));
-var import_path25 = __toESM(require("path"));
-var import_os19 = __toESM(require("os"));
+var import_fs25 = __toESM(require("fs"));
+var import_path27 = __toESM(require("path"));
+var import_os21 = __toESM(require("os"));
 function formatRelativeTime(timestamp) {
   const diff = Date.now() - new Date(timestamp).getTime();
   const sec = Math.floor(diff / 1e3);
@@ -10251,14 +11012,14 @@ function formatRelativeTime(timestamp) {
 }
 function registerAuditCommand(program2) {
   program2.command("audit").description("View local execution audit log").option("--tail <n>", "Number of entries to show", "20").option("--tool <pattern>", "Filter by tool name (substring match)").option("--deny", "Show only denied actions").option("--json", "Output raw JSON").action((options) => {
-    const logPath = import_path25.default.join(import_os19.default.homedir(), ".node9", "audit.log");
-    if (!import_fs23.default.existsSync(logPath)) {
+    const logPath = import_path27.default.join(import_os21.default.homedir(), ".node9", "audit.log");
+    if (!import_fs25.default.existsSync(logPath)) {
       console.log(
         import_chalk8.default.yellow("No audit logs found. Run node9 with an agent to generate entries.")
       );
       return;
     }
-    const raw = import_fs23.default.readFileSync(logPath, "utf-8");
+    const raw = import_fs25.default.readFileSync(logPath, "utf-8");
     const lines = raw.split("\n").filter((l) => l.trim() !== "");
     let entries = lines.flatMap((line) => {
       try {
@@ -10312,9 +11073,9 @@ function registerAuditCommand(program2) {
 
 // src/cli/commands/report.ts
 var import_chalk9 = __toESM(require("chalk"));
-var import_fs24 = __toESM(require("fs"));
-var import_path26 = __toESM(require("path"));
-var import_os20 = __toESM(require("os"));
+var import_fs26 = __toESM(require("fs"));
+var import_path28 = __toESM(require("path"));
+var import_os22 = __toESM(require("os"));
 var TEST_COMMAND_RE3 = /(?:^|\s)(npm\s+(?:run\s+)?test|npx\s+(?:vitest|jest|mocha)|yarn\s+(?:run\s+)?test|pnpm\s+(?:run\s+)?test|vitest|jest|mocha|pytest|py\.test|cargo\s+test|go\s+test|bundle\s+exec\s+rspec|rspec|phpunit|dotnet\s+test)\b/i;
 function buildTestTimestamps(allEntries) {
   const testTs = /* @__PURE__ */ new Set();
@@ -10361,8 +11122,8 @@ function getDateRange(period) {
   }
 }
 function parseAuditLog(logPath) {
-  if (!import_fs24.default.existsSync(logPath)) return [];
-  const raw = import_fs24.default.readFileSync(logPath, "utf-8");
+  if (!import_fs26.default.existsSync(logPath)) return [];
+  const raw = import_fs26.default.readFileSync(logPath, "utf-8");
   return raw.split("\n").flatMap((line) => {
     if (!line.trim()) return [];
     try {
@@ -10388,9 +11149,9 @@ function colorBar(value, max, width) {
   const filled = Math.max(1, Math.round(max > 0 ? value / max * width : 0));
   return import_chalk9.default.cyan(s.slice(0, filled)) + import_chalk9.default.dim(s.slice(filled));
 }
-function pct(num2, total) {
+function pct(num3, total) {
   if (total === 0) return "\u2013";
-  return Math.round(num2 / total * 100) + "%";
+  return Math.round(num3 / total * 100) + "%";
 }
 function fmtDate(d) {
   const date = typeof d === "string" ? /* @__PURE__ */ new Date(d + "T12:00:00") : d;
@@ -10431,11 +11192,11 @@ function loadClaudeCost(start, end) {
     inputTokens: 0,
     cacheReadTokens: 0
   };
-  const projectsDir = import_path26.default.join(import_os20.default.homedir(), ".claude", "projects");
-  if (!import_fs24.default.existsSync(projectsDir)) return empty;
+  const projectsDir = import_path28.default.join(import_os22.default.homedir(), ".claude", "projects");
+  if (!import_fs26.default.existsSync(projectsDir)) return empty;
   let dirs;
   try {
-    dirs = import_fs24.default.readdirSync(projectsDir);
+    dirs = import_fs26.default.readdirSync(projectsDir);
   } catch {
     return empty;
   }
@@ -10445,18 +11206,18 @@ function loadClaudeCost(start, end) {
   const byDay = /* @__PURE__ */ new Map();
   const byModel = /* @__PURE__ */ new Map();
   for (const proj of dirs) {
-    const projPath = import_path26.default.join(projectsDir, proj);
+    const projPath = import_path28.default.join(projectsDir, proj);
     let files;
     try {
-      const stat = import_fs24.default.statSync(projPath);
+      const stat = import_fs26.default.statSync(projPath);
       if (!stat.isDirectory()) continue;
-      files = import_fs24.default.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
+      files = import_fs26.default.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
     } catch {
       continue;
     }
     for (const file of files) {
       try {
-        const raw = import_fs24.default.readFileSync(import_path26.default.join(projPath, file), "utf-8");
+        const raw = import_fs26.default.readFileSync(import_path28.default.join(projPath, file), "utf-8");
         for (const line of raw.split("\n")) {
           if (!line.trim()) continue;
           let entry;
@@ -10499,7 +11260,7 @@ function registerReportCommand(program2) {
     const period = ["today", "7d", "30d", "month"].includes(
       options.period
     ) ? options.period : "7d";
-    const logPath = import_path26.default.join(import_os20.default.homedir(), ".node9", "audit.log");
+    const logPath = import_path28.default.join(import_os22.default.homedir(), ".node9", "audit.log");
     const allEntries = parseAuditLog(logPath);
     if (allEntries.length === 0) {
       console.log(
@@ -10747,26 +11508,67 @@ function registerReportCommand(program2) {
 
 // src/cli/commands/daemon-cmd.ts
 var import_chalk10 = __toESM(require("chalk"));
-var import_child_process11 = require("child_process");
+var import_child_process12 = require("child_process");
 init_daemon2();
 init_daemon();
+var VALID_ACTIONS = "start | stop | restart | status | install | uninstall";
 function registerDaemonCommand(program2) {
-  program2.command("daemon").description("Run the local approval server").argument("[action]", "start | stop | status (default: start)").option("-b, --background", "Start the daemon in the background (detached)").option("-o, --openui", "Start in background and open browser").option(
+  program2.command("daemon").description("Manage the local approval daemon").argument("[action]", `${VALID_ACTIONS} (default: start)`).option("-b, --background", "Start the daemon in the background (detached)").option("-o, --openui", "Start in background and open browser").option(
     "-w, --watch",
     "Start daemon + open browser, stay alive permanently (Flight Recorder mode)"
   ).action(
     async (action, options) => {
       const cmd = (action ?? "start").toLowerCase();
-      if (cmd === "stop") return stopDaemon();
-      if (cmd === "status") return daemonStatus();
-      if (cmd !== "start" && action !== void 0) {
-        console.error(
-          import_chalk10.default.red(`Unknown daemon action: "${action}". Use: start | stop | status`)
-        );
-        process.exit(1);
+      if (cmd === "install") {
+        const result = installDaemonService();
+        if (!result.ok) {
+          console.error(import_chalk10.default.red(`\u2717 ${result.reason}`));
+          process.exit(1);
+        }
+        if (result.alreadyInstalled) {
+          console.log(import_chalk10.default.green(`\u2713 Daemon service reinstalled (${result.platform})`));
+        } else {
+          console.log(import_chalk10.default.green(`\u2713 Daemon installed as login service (${result.platform})`));
+          console.log(import_chalk10.default.gray("  The daemon will now start automatically on login."));
+        }
+        process.exit(0);
       }
-      if (options.watch) {
-        process.env.NODE9_WATCH_MODE = "1";
+      if (cmd === "uninstall") {
+        const result = uninstallDaemonService();
+        if (!result.ok) {
+          console.error(import_chalk10.default.red(`\u2717 ${result.reason}`));
+          process.exit(1);
+        }
+        console.log(import_chalk10.default.green(`\u2713 Daemon service removed (${result.platform})`));
+        console.log(import_chalk10.default.gray("  The daemon will no longer start automatically on login."));
+        console.log(import_chalk10.default.gray("  To stop the running daemon: node9 daemon stop"));
+        process.exit(0);
+      }
+      if (cmd === "stop") return stopDaemon();
+      if (cmd === "restart") {
+        stopDaemon();
+        await new Promise((r) => setTimeout(r, 500));
+        const child = (0, import_child_process12.spawn)(process.execPath, [process.argv[1], "daemon"], {
+          detached: true,
+          stdio: "ignore",
+          env: { ...process.env, NODE9_AUTO_STARTED: "1", NODE9_BROWSER_OPENED: "1" }
+        });
+        child.unref();
+        if (child.pid) {
+          console.log(import_chalk10.default.green(`\u2713 Daemon restarted (PID ${child.pid})`));
+        } else {
+          console.error(import_chalk10.default.red("\u2717 Failed to restart daemon \u2014 spawn returned no PID"));
+          process.exit(1);
+        }
+        process.exit(0);
+      }
+      if (cmd === "status") return daemonStatus();
+      if (cmd !== "start" && action !== void 0) {
+        console.error(import_chalk10.default.red(`Unknown daemon action: "${action}". Use: ${VALID_ACTIONS}`));
+        process.exit(1);
+      }
+      if (options.watch) {
+        process.env.NODE9_WATCH_MODE = "1";
         setTimeout(() => {
           openBrowserLocal();
           console.log(import_chalk10.default.cyan(`\u{1F6F0}\uFE0F  Flight Recorder: http://${DAEMON_HOST}:${DAEMON_PORT}/`));
@@ -10780,7 +11582,7 @@ function registerDaemonCommand(program2) {
           console.log(import_chalk10.default.green(`\u{1F310}  Opened browser: http://${DAEMON_HOST}:${DAEMON_PORT}/`));
           process.exit(0);
         }
-        const child = (0, import_child_process11.spawn)(process.execPath, [process.argv[1], "daemon"], {
+        const child = (0, import_child_process12.spawn)(process.execPath, [process.argv[1], "daemon"], {
           detached: true,
           stdio: "ignore"
         });
@@ -10795,7 +11597,7 @@ function registerDaemonCommand(program2) {
         process.exit(0);
       }
       if (options.background) {
-        const child = (0, import_child_process11.spawn)(process.execPath, [process.argv[1], "daemon"], {
+        const child = (0, import_child_process12.spawn)(process.execPath, [process.argv[1], "daemon"], {
           detached: true,
           stdio: "ignore"
         });
@@ -10811,14 +11613,14 @@ function registerDaemonCommand(program2) {
 
 // src/cli/commands/status.ts
 var import_chalk11 = __toESM(require("chalk"));
-var import_fs25 = __toESM(require("fs"));
-var import_path27 = __toESM(require("path"));
-var import_os21 = __toESM(require("os"));
+var import_fs27 = __toESM(require("fs"));
+var import_path29 = __toESM(require("path"));
+var import_os23 = __toESM(require("os"));
 init_core();
 init_daemon();
 function readJson2(filePath) {
   try {
-    if (import_fs25.default.existsSync(filePath)) return JSON.parse(import_fs25.default.readFileSync(filePath, "utf-8"));
+    if (import_fs27.default.existsSync(filePath)) return JSON.parse(import_fs27.default.readFileSync(filePath, "utf-8"));
   } catch {
   }
   return null;
@@ -10883,28 +11685,28 @@ function registerStatusCommand(program2) {
     console.log("");
     const modeLabel = settings.mode === "audit" ? import_chalk11.default.blue("audit") : settings.mode === "strict" ? import_chalk11.default.red("strict") : import_chalk11.default.white("standard");
     console.log(`  Mode:    ${modeLabel}`);
-    const projectConfig = import_path27.default.join(process.cwd(), "node9.config.json");
-    const globalConfig = import_path27.default.join(import_os21.default.homedir(), ".node9", "config.json");
+    const projectConfig = import_path29.default.join(process.cwd(), "node9.config.json");
+    const globalConfig = import_path29.default.join(import_os23.default.homedir(), ".node9", "config.json");
     console.log(
-      `  Local:   ${import_fs25.default.existsSync(projectConfig) ? import_chalk11.default.green("Active (node9.config.json)") : import_chalk11.default.gray("Not present")}`
+      `  Local:   ${import_fs27.default.existsSync(projectConfig) ? import_chalk11.default.green("Active (node9.config.json)") : import_chalk11.default.gray("Not present")}`
     );
     console.log(
-      `  Global:  ${import_fs25.default.existsSync(globalConfig) ? import_chalk11.default.green("Active (~/.node9/config.json)") : import_chalk11.default.gray("Not present")}`
+      `  Global:  ${import_fs27.default.existsSync(globalConfig) ? import_chalk11.default.green("Active (~/.node9/config.json)") : import_chalk11.default.gray("Not present")}`
     );
     if (mergedConfig.policy.sandboxPaths.length > 0) {
       console.log(
         `  Sandbox: ${import_chalk11.default.green(`${mergedConfig.policy.sandboxPaths.length} safe zones active`)}`
       );
     }
-    const homeDir2 = import_os21.default.homedir();
+    const homeDir2 = import_os23.default.homedir();
     const claudeSettings = readJson2(
-      import_path27.default.join(homeDir2, ".claude", "settings.json")
+      import_path29.default.join(homeDir2, ".claude", "settings.json")
     );
-    const claudeConfig = readJson2(import_path27.default.join(homeDir2, ".claude.json"));
+    const claudeConfig = readJson2(import_path29.default.join(homeDir2, ".claude.json"));
     const geminiSettings = readJson2(
-      import_path27.default.join(homeDir2, ".gemini", "settings.json")
+      import_path29.default.join(homeDir2, ".gemini", "settings.json")
     );
-    const cursorConfig = readJson2(import_path27.default.join(homeDir2, ".cursor", "mcp.json"));
+    const cursorConfig = readJson2(import_path29.default.join(homeDir2, ".cursor", "mcp.json"));
     const agentFound = claudeSettings || claudeConfig || geminiSettings || cursorConfig;
     if (agentFound) {
       console.log("");
@@ -10963,12 +11765,13 @@ function registerStatusCommand(program2) {
 
 // src/cli/commands/init.ts
 var import_chalk12 = __toESM(require("chalk"));
-var import_fs26 = __toESM(require("fs"));
-var import_path28 = __toESM(require("path"));
-var import_os22 = __toESM(require("os"));
-var import_https2 = __toESM(require("https"));
+var import_fs28 = __toESM(require("fs"));
+var import_path30 = __toESM(require("path"));
+var import_os24 = __toESM(require("os"));
+var import_https3 = __toESM(require("https"));
 init_core();
 init_shields();
+init_service();
 var DEFAULT_SHIELDS = ["bash-safe", "filesystem", "postgres"];
 function fireTelemetryPing(agents) {
   try {
@@ -10978,7 +11781,7 @@ function fireTelemetryPing(agents) {
       os: process.platform,
       node9_version: process.env.npm_package_version ?? "unknown"
     });
-    const req = import_https2.default.request(
+    const req = import_https3.default.request(
       {
         hostname: "api.node9.ai",
         path: "/api/v1/telemetry",
@@ -11025,15 +11828,15 @@ function registerInitCommand(program2) {
       }
       console.log("");
     }
-    const configPath = import_path28.default.join(import_os22.default.homedir(), ".node9", "config.json");
-    if (import_fs26.default.existsSync(configPath) && !options.force) {
+    const configPath = import_path30.default.join(import_os24.default.homedir(), ".node9", "config.json");
+    if (import_fs28.default.existsSync(configPath) && !options.force) {
       try {
-        const existing = JSON.parse(import_fs26.default.readFileSync(configPath, "utf-8"));
+        const existing = JSON.parse(import_fs28.default.readFileSync(configPath, "utf-8"));
         const settings = existing.settings ?? {};
         if (settings.mode !== chosenMode) {
           settings.mode = chosenMode;
           existing.settings = settings;
-          import_fs26.default.writeFileSync(configPath, JSON.stringify(existing, null, 2) + "\n");
+          import_fs28.default.writeFileSync(configPath, JSON.stringify(existing, null, 2) + "\n");
           console.log(import_chalk12.default.green(`\u2705 Mode updated: ${chosenMode}`));
         } else {
           console.log(import_chalk12.default.blue(`\u2139\uFE0F  Config already exists: ${configPath}`));
@@ -11046,9 +11849,9 @@ function registerInitCommand(program2) {
         ...DEFAULT_CONFIG,
         settings: { ...DEFAULT_CONFIG.settings, mode: chosenMode }
       };
-      const dir = import_path28.default.dirname(configPath);
-      if (!import_fs26.default.existsSync(dir)) import_fs26.default.mkdirSync(dir, { recursive: true });
-      import_fs26.default.writeFileSync(configPath, JSON.stringify(configToSave, null, 2) + "\n");
+      const dir = import_path30.default.dirname(configPath);
+      if (!import_fs28.default.existsSync(dir)) import_fs28.default.mkdirSync(dir, { recursive: true });
+      import_fs28.default.writeFileSync(configPath, JSON.stringify(configToSave, null, 2) + "\n");
       console.log(import_chalk12.default.green(`\u2705 Config created: ${configPath}`));
       console.log(import_chalk12.default.gray(`   Mode: ${chosenMode}`));
     }
@@ -11060,9 +11863,13 @@ function registerInitCommand(program2) {
     );
     if (found.length === 0) {
       console.log(
-        import_chalk12.default.gray("No AI agents detected. Install Claude Code, Gemini CLI, Cursor, or Codex")
+        import_chalk12.default.gray(
+          "No AI agents detected. Install Claude Code, Gemini CLI, Cursor, Windsurf, VSCode, or Codex"
+        )
+      );
+      console.log(
+        import_chalk12.default.gray("then run: node9 agents add <claude|gemini|cursor|windsurf|vscode|codex>")
       );
-      console.log(import_chalk12.default.gray("then run: node9 addto <claude|gemini|cursor|codex>"));
       return;
     }
     console.log(import_chalk12.default.bold("Detected agents:"));
@@ -11076,6 +11883,32 @@ function registerInitCommand(program2) {
       else if (agent === "gemini") await setupGemini();
       else if (agent === "cursor") await setupCursor();
       else if (agent === "codex") await setupCodex();
+      else if (agent === "windsurf") await setupWindsurf();
+      else if (agent === "vscode") await setupVSCode();
+      console.log("");
+    }
+    if ((process.platform === "darwin" || process.platform === "linux") && process.stdout.isTTY) {
+      const alreadyInstalled = isDaemonServiceInstalled();
+      if (!alreadyInstalled) {
+        const { confirm: confirm3 } = await import("@inquirer/prompts");
+        const installService = await confirm3({
+          message: "Install daemon as a login service? (starts automatically on login)",
+          default: true
+        });
+        if (installService) {
+          const result = installDaemonService();
+          if (result.ok) {
+            console.log(
+              import_chalk12.default.green(`  \u2713 Daemon installed as login service (${result.platform})`)
+            );
+          } else {
+            console.log(import_chalk12.default.yellow(`  \u26A0\uFE0F  Could not install service: ${result.reason}`));
+            console.log(import_chalk12.default.gray("     You can try again later with: node9 daemon install"));
+          }
+        }
+      } else {
+        console.log(import_chalk12.default.green("  \u2713 Daemon login service already installed"));
+      }
       console.log("");
     }
     {
@@ -11102,7 +11935,7 @@ function registerInitCommand(program2) {
 }
 
 // src/cli/commands/undo.ts
-var import_path29 = __toESM(require("path"));
+var import_path31 = __toESM(require("path"));
 var import_chalk14 = __toESM(require("chalk"));
 
 // src/tui/undo-navigator.ts
@@ -11261,7 +12094,7 @@ function findMatchingCwd(startDir, history) {
   let dir = startDir;
   while (true) {
     if (cwds.has(dir)) return dir;
-    const parent = import_path29.default.dirname(dir);
+    const parent = import_path31.default.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -11389,7 +12222,7 @@ function registerUndoCommand(program2) {
 
 // src/cli/commands/watch.ts
 var import_chalk15 = __toESM(require("chalk"));
-var import_child_process12 = require("child_process");
+var import_child_process13 = require("child_process");
 init_daemon();
 function registerWatchCommand(program2) {
   program2.command("watch").description("Run a command under Node9 watch mode (daemon stays alive for the session)").argument("<command>", "Command to run").argument("[args...]", "Arguments for the command").action(async (cmd, args) => {
@@ -11406,7 +12239,7 @@ function registerWatchCommand(program2) {
       }
     } catch {
       console.error(import_chalk15.default.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon (watch mode)..."));
-      const child = (0, import_child_process12.spawn)(process.execPath, [process.argv[1], "daemon"], {
+      const child = (0, import_child_process13.spawn)(process.execPath, [process.argv[1], "daemon"], {
         detached: true,
         stdio: "ignore",
         env: { ...process.env, NODE9_AUTO_STARTED: "1", NODE9_WATCH_MODE: "1" }
@@ -11436,7 +12269,7 @@ function registerWatchCommand(program2) {
         "\n   Tip: run `node9 tail` in another terminal to review and approve AI actions.\n"
       )
     );
-    const result = (0, import_child_process12.spawnSync)(cmd, args, {
+    const result = (0, import_child_process13.spawnSync)(cmd, args, {
       stdio: "inherit",
       env: { ...process.env, NODE9_WATCH_MODE: "1" }
     });
@@ -11451,18 +12284,18 @@ function registerWatchCommand(program2) {
 // src/mcp-gateway/index.ts
 var import_readline3 = __toESM(require("readline"));
 var import_chalk16 = __toESM(require("chalk"));
-var import_child_process13 = require("child_process");
+var import_child_process14 = require("child_process");
 var import_execa3 = require("execa");
 init_orchestrator();
 init_provenance();
 
 // src/mcp-pin.ts
-var import_fs27 = __toESM(require("fs"));
-var import_path30 = __toESM(require("path"));
-var import_os23 = __toESM(require("os"));
+var import_fs29 = __toESM(require("fs"));
+var import_path32 = __toESM(require("path"));
+var import_os25 = __toESM(require("os"));
 var import_crypto9 = __toESM(require("crypto"));
 function getPinsFilePath() {
-  return import_path30.default.join(import_os23.default.homedir(), ".node9", "mcp-pins.json");
+  return import_path32.default.join(import_os25.default.homedir(), ".node9", "mcp-pins.json");
 }
 function hashToolDefinitions(tools) {
   const sorted = [...tools].sort((a, b) => {
@@ -11479,7 +12312,7 @@ function getServerKey(upstreamCommand) {
 function readMcpPinsSafe() {
   const filePath = getPinsFilePath();
   try {
-    const raw = import_fs27.default.readFileSync(filePath, "utf-8");
+    const raw = import_fs29.default.readFileSync(filePath, "utf-8");
     if (!raw.trim()) {
       return { ok: false, reason: "corrupt", detail: "empty file" };
     }
@@ -11503,10 +12336,10 @@ function readMcpPins() {
 }
 function writeMcpPins(data) {
   const filePath = getPinsFilePath();
-  import_fs27.default.mkdirSync(import_path30.default.dirname(filePath), { recursive: true });
+  import_fs29.default.mkdirSync(import_path32.default.dirname(filePath), { recursive: true });
   const tmp = `${filePath}.${import_crypto9.default.randomBytes(6).toString("hex")}.tmp`;
-  import_fs27.default.writeFileSync(tmp, JSON.stringify(data, null, 2), { mode: 384 });
-  import_fs27.default.renameSync(tmp, filePath);
+  import_fs29.default.writeFileSync(tmp, JSON.stringify(data, null, 2), { mode: 384 });
+  import_fs29.default.renameSync(tmp, filePath);
 }
 function checkPin(serverKey, currentHash) {
   const result = readMcpPinsSafe();
@@ -11623,7 +12456,7 @@ async function runMcpGateway(upstreamCommand) {
   const safeEnv = Object.fromEntries(
     Object.entries(process.env).filter(([k]) => !UPSTREAM_INJECTOR_VARS.has(k))
   );
-  const child = (0, import_child_process13.spawn)(executable, cmdArgs, {
+  const child = (0, import_child_process14.spawn)(executable, cmdArgs, {
     stdio: ["pipe", "pipe", "inherit"],
     // control stdin/stdout; inherit stderr
     shell: false,
@@ -11878,9 +12711,9 @@ function registerMcpGatewayCommand(program2) {
 
 // src/mcp-server/index.ts
 var import_readline4 = __toESM(require("readline"));
-var import_fs28 = __toESM(require("fs"));
-var import_os24 = __toESM(require("os"));
-var import_path31 = __toESM(require("path"));
+var import_fs30 = __toESM(require("fs"));
+var import_os26 = __toESM(require("os"));
+var import_path33 = __toESM(require("path"));
 init_core();
 init_daemon();
 init_shields();
@@ -12055,13 +12888,13 @@ function handleStatus() {
   lines.push(`Active shields: ${activeShields.length > 0 ? activeShields.join(", ") : "none"}`);
   lines.push(`Smart rules: ${config.policy.smartRules.length} loaded`);
   lines.push(`DLP: ${config.policy.dlp?.enabled !== false ? "enabled" : "disabled"}`);
-  const projectConfig = import_path31.default.join(process.cwd(), "node9.config.json");
-  const globalConfig = import_path31.default.join(import_os24.default.homedir(), ".node9", "config.json");
+  const projectConfig = import_path33.default.join(process.cwd(), "node9.config.json");
+  const globalConfig = import_path33.default.join(import_os26.default.homedir(), ".node9", "config.json");
   lines.push(
-    `Project config (node9.config.json): ${import_fs28.default.existsSync(projectConfig) ? "present" : "not found"}`
+    `Project config (node9.config.json): ${import_fs30.default.existsSync(projectConfig) ? "present" : "not found"}`
   );
   lines.push(
-    `Global config (~/.node9/config.json): ${import_fs28.default.existsSync(globalConfig) ? "present" : "not found"}`
+    `Global config (~/.node9/config.json): ${import_fs30.default.existsSync(globalConfig) ? "present" : "not found"}`
   );
   return lines.join("\n");
 }
@@ -12135,21 +12968,21 @@ function handleShieldDisable(args) {
   writeActiveShields(active.filter((s) => s !== name));
   return `Shield "${name}" disabled.`;
 }
-var GLOBAL_CONFIG_PATH2 = import_path31.default.join(import_os24.default.homedir(), ".node9", "config.json");
+var GLOBAL_CONFIG_PATH2 = import_path33.default.join(import_os26.default.homedir(), ".node9", "config.json");
 var APPROVER_CHANNELS = ["native", "browser", "cloud", "terminal"];
 function readGlobalConfigRaw() {
   try {
-    if (import_fs28.default.existsSync(GLOBAL_CONFIG_PATH2)) {
-      return JSON.parse(import_fs28.default.readFileSync(GLOBAL_CONFIG_PATH2, "utf-8"));
+    if (import_fs30.default.existsSync(GLOBAL_CONFIG_PATH2)) {
+      return JSON.parse(import_fs30.default.readFileSync(GLOBAL_CONFIG_PATH2, "utf-8"));
     }
   } catch {
   }
   return {};
 }
 function writeGlobalConfigRaw(data) {
-  const dir = import_path31.default.dirname(GLOBAL_CONFIG_PATH2);
-  if (!import_fs28.default.existsSync(dir)) import_fs28.default.mkdirSync(dir, { recursive: true });
-  import_fs28.default.writeFileSync(GLOBAL_CONFIG_PATH2, JSON.stringify(data, null, 2) + "\n");
+  const dir = import_path33.default.dirname(GLOBAL_CONFIG_PATH2);
+  if (!import_fs30.default.existsSync(dir)) import_fs30.default.mkdirSync(dir, { recursive: true });
+  import_fs30.default.writeFileSync(GLOBAL_CONFIG_PATH2, JSON.stringify(data, null, 2) + "\n");
 }
 function handleApproverList() {
   const config = getConfig();
@@ -12192,9 +13025,9 @@ function handleApproverSet(args) {
 }
 function handleAuditGet(args) {
   const limit = Math.min(typeof args.limit === "number" ? args.limit : 20, 100);
-  const auditPath = import_path31.default.join(import_os24.default.homedir(), ".node9", "audit.log");
-  if (!import_fs28.default.existsSync(auditPath)) return "No audit log found.";
-  const lines = import_fs28.default.readFileSync(auditPath, "utf-8").trim().split("\n").filter(Boolean);
+  const auditPath = import_path33.default.join(import_os26.default.homedir(), ".node9", "audit.log");
+  if (!import_fs30.default.existsSync(auditPath)) return "No audit log found.";
+  const lines = import_fs30.default.readFileSync(auditPath, "utf-8").trim().split("\n").filter(Boolean);
   const recent = lines.slice(-limit);
   const entries = recent.map((line) => {
     try {
@@ -12512,25 +13345,950 @@ function registerMcpPinCommand(program2) {
   });
 }
 
+// src/cli/commands/sync.ts
+var import_chalk19 = __toESM(require("chalk"));
+init_sync();
+function registerSyncCommand(program2) {
+  const policy = program2.command("policy").description("Manage cloud policy rules");
+  policy.command("sync").description("Sync cloud policy rules to local cache (~/.node9/rules-cache.json)").action(async () => {
+    process.stdout.write(import_chalk19.default.cyan("Syncing cloud policy rules\u2026"));
+    const result = await runCloudSync();
+    process.stdout.write("\n");
+    if (!result.ok) {
+      console.error(import_chalk19.default.red(`\u2717 ${result.reason}`));
+      process.exit(1);
+    }
+    console.log(
+      import_chalk19.default.green(`\u2713 Synced ${result.rules} rule${result.rules === 1 ? "" : "s"} from cloud`)
+    );
+    console.log(import_chalk19.default.gray(`  Cached at: ${result.fetchedAt}`));
+    console.log(import_chalk19.default.gray(`  File: ~/.node9/rules-cache.json`));
+  });
+  policy.command("show").description("List all cloud policy rules in the local cache").action(() => {
+    const status = getCloudSyncStatus();
+    if (!status.cached) {
+      console.log(import_chalk19.default.yellow("\n  No cloud rules cached \u2014 run: node9 policy sync\n"));
+      return;
+    }
+    const rules = getCloudRules() ?? [];
+    const age = Math.round((Date.now() - new Date(status.fetchedAt).getTime()) / 6e4);
+    console.log(
+      import_chalk19.default.bold(`
+  Cloud policy rules`) + import_chalk19.default.gray(
+        ` (${rules.length} rule${rules.length === 1 ? "" : "s"}, synced ${age}m ago)
+`
+      )
+    );
+    if (rules.length === 0) {
+      console.log(import_chalk19.default.gray("  No rules defined in cloud policy.\n"));
+      return;
+    }
+    for (const rule of rules) {
+      const r = rule;
+      const verdictColor = r.verdict === "block" ? import_chalk19.default.red : r.verdict === "allow" ? import_chalk19.default.green : import_chalk19.default.yellow;
+      console.log(
+        `  ${verdictColor(
+          String(r.verdict ?? "unknown").toUpperCase().padEnd(6)
+        )}  ${import_chalk19.default.white(String(r.name ?? "(unnamed)"))}`
+      );
+      if (r.reason) console.log(import_chalk19.default.gray(`           ${String(r.reason)}`));
+    }
+    console.log("");
+  });
+  policy.command("status").description("Show current cloud policy cache status").action(() => {
+    const s = getCloudSyncStatus();
+    if (!s.cached) {
+      console.log(import_chalk19.default.yellow("\n  No cache yet \u2014 run: node9 policy sync\n"));
+    } else {
+      const age = Math.round((Date.now() - new Date(s.fetchedAt).getTime()) / 6e4);
+      console.log(`
+  Rules   : ${import_chalk19.default.green(String(s.rules))} cloud rules loaded`);
+      console.log(
+        `  Synced  : ${import_chalk19.default.gray(`${age} minute${age === 1 ? "" : "s"} ago`)} (${s.fetchedAt})
+`
+      );
+    }
+  });
+}
+
+// src/cli/commands/agents.ts
+var import_chalk20 = __toESM(require("chalk"));
+var SETUP_FN = {
+  claude: setupClaude,
+  gemini: setupGemini,
+  cursor: setupCursor,
+  codex: setupCodex,
+  windsurf: setupWindsurf,
+  vscode: setupVSCode
+};
+var TEARDOWN_FN = {
+  claude: teardownClaude,
+  gemini: teardownGemini,
+  cursor: teardownCursor,
+  codex: teardownCodex,
+  windsurf: teardownWindsurf,
+  vscode: teardownVSCode
+};
+var AGENT_NAMES = Object.keys(SETUP_FN);
+function registerAgentsCommand(program2) {
+  const agents = program2.command("agents").description("List and manage AI agent integrations");
+  agents.command("list").description("Show all supported agents and their Node9 status").action(() => {
+    const statuses = getAgentsStatus();
+    const anyInstalled = statuses.some((s) => s.installed);
+    console.log("");
+    console.log(`  ${"Agent".padEnd(14)}${"Installed".padEnd(11)}${"Wired".padEnd(8)}Mode`);
+    console.log("  " + "\u2500".repeat(44));
+    for (const s of statuses) {
+      const installed = s.installed ? import_chalk20.default.green("\u2713") : import_chalk20.default.gray("\u2717");
+      const wired = !s.installed ? import_chalk20.default.gray("\u2014") : s.wired ? import_chalk20.default.green("\u2713") : import_chalk20.default.yellow("\u2717");
+      const mode = s.mode ? import_chalk20.default.gray(s.mode) : import_chalk20.default.gray("\u2014");
+      const hint = s.installed && !s.wired ? import_chalk20.default.gray(`  \u2190 node9 agents add ${s.name}`) : "";
+      console.log(`  ${s.label.padEnd(14)}${installed}          ${wired}       ${mode}${hint}`);
+    }
+    console.log("");
+    if (!anyInstalled) {
+      console.log(
+        import_chalk20.default.gray("  No AI agents detected. Install Claude Code, Gemini CLI, Cursor,\n") + import_chalk20.default.gray("  Windsurf, VSCode, or Codex then run: node9 agents list\n")
+      );
+      return;
+    }
+    const unwired = statuses.filter((s) => s.installed && !s.wired);
+    if (unwired.length > 0) {
+      console.log(
+        import_chalk20.default.yellow(`  ${unwired.length} agent(s) not yet wired. Run: `) + import_chalk20.default.white(`node9 agents add ${unwired[0].name}`) + "\n"
+      );
+    }
+  });
+  agents.command("add").description("Wire Node9 into an agent").argument("<agent>", `Agent to wire: ${AGENT_NAMES.join(" | ")}`).action(async (agent) => {
+    const name = agent.toLowerCase();
+    const fn = SETUP_FN[name];
+    if (!fn) {
+      console.error(import_chalk20.default.red(`Unknown agent: "${agent}". Supported: ${AGENT_NAMES.join(", ")}`));
+      process.exit(1);
+    }
+    await fn();
+  });
+  agents.command("remove").description("Remove Node9 from an agent").argument("<agent>", `Agent to unwire: ${AGENT_NAMES.join(" | ")}`).action((agent) => {
+    const name = agent.toLowerCase();
+    const fn = TEARDOWN_FN[name];
+    if (!fn) {
+      console.error(import_chalk20.default.red(`Unknown agent: "${agent}". Supported: ${AGENT_NAMES.join(", ")}`));
+      process.exit(1);
+    }
+    console.log(import_chalk20.default.cyan(`
+\u{1F6E1}\uFE0F  Node9: removing from ${name}...
+`));
+    fn();
+    console.log(import_chalk20.default.gray("\n  Restart the agent for changes to take effect."));
+  });
+}
+
+// src/cli/commands/scan.ts
+var import_chalk21 = __toESM(require("chalk"));
+var import_fs31 = __toESM(require("fs"));
+var import_path34 = __toESM(require("path"));
+var import_os27 = __toESM(require("os"));
+init_shields();
+init_config();
+init_policy();
+init_dlp();
+var CLAUDE_PRICING2 = {
+  "claude-opus-4-6": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
+  "claude-opus-4-5": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
+  "claude-opus-4": { i: 15e-6, o: 75e-6, cw: 1875e-8, cr: 15e-7 },
+  "claude-sonnet-4-6": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
+  "claude-sonnet-4-5": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
+  "claude-sonnet-4": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
+  "claude-3-7-sonnet": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
+  "claude-3-5-sonnet": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
+  "claude-haiku-4-5": { i: 1e-6, o: 5e-6, cw: 125e-8, cr: 1e-7 },
+  "claude-3-5-haiku": { i: 8e-7, o: 4e-6, cw: 1e-6, cr: 8e-8 }
+};
+function claudeModelPrice2(model) {
+  const base = model.replace(/@.*$/, "").replace(/-\d{8}$/, "");
+  for (const [key, p] of Object.entries(CLAUDE_PRICING2)) {
+    if (base === key || base.startsWith(key)) return p;
+  }
+  return null;
+}
+function num2(n) {
+  return n.toLocaleString();
+}
+function fmtCost2(usd) {
+  if (usd < 1e-3) return "< $0.001";
+  if (usd < 1) return "$" + usd.toFixed(4);
+  return "$" + usd.toFixed(2);
+}
+function fmtTs(ts) {
+  try {
+    return new Date(ts).toLocaleDateString("en-US", {
+      month: "short",
+      day: "numeric",
+      year: "numeric"
+    });
+  } catch {
+    return ts.slice(0, 10);
+  }
+}
+function preview(input, max) {
+  const cmd = input.command ?? input.query ?? input.file_path ?? JSON.stringify(input);
+  const s = String(cmd).replace(/\s+/g, " ").trim();
+  return s.length > max ? s.slice(0, max - 1) + "\u2026" : s;
+}
+function buildRuleSources() {
+  const sources = [];
+  for (const [shieldName, shield] of Object.entries(SHIELDS)) {
+    for (const rule of shield.smartRules) {
+      sources.push({ shieldName, shieldLabel: shieldName, rule });
+    }
+  }
+  try {
+    const config = getConfig();
+    for (const rule of config.policy.smartRules) {
+      if (!rule.name) continue;
+      if (rule.name.startsWith("shield:")) continue;
+      const isCloud = rule.name.startsWith("cloud:");
+      sources.push({
+        shieldName: isCloud ? "cloud" : "custom",
+        shieldLabel: isCloud ? "Cloud Policy" : "Your Rules",
+        rule
+      });
+    }
+  } catch {
+  }
+  return sources;
+}
+function scanClaudeHistory(startDate) {
+  const projectsDir = import_path34.default.join(import_os27.default.homedir(), ".claude", "projects");
+  const result = {
+    filesScanned: 0,
+    sessions: 0,
+    totalToolCalls: 0,
+    bashCalls: 0,
+    findings: [],
+    dlpFindings: [],
+    totalCostUSD: 0,
+    firstDate: null,
+    lastDate: null
+  };
+  if (!import_fs31.default.existsSync(projectsDir)) return result;
+  let projDirs;
+  try {
+    projDirs = import_fs31.default.readdirSync(projectsDir);
+  } catch {
+    return result;
+  }
+  const ruleSources = buildRuleSources();
+  for (const proj of projDirs) {
+    const projPath = import_path34.default.join(projectsDir, proj);
+    try {
+      if (!import_fs31.default.statSync(projPath).isDirectory()) continue;
+    } catch {
+      continue;
+    }
+    const projLabel = decodeURIComponent(proj).replace(import_os27.default.homedir(), "~").slice(0, 40);
+    let files;
+    try {
+      files = import_fs31.default.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
+    } catch {
+      continue;
+    }
+    for (const file of files) {
+      result.filesScanned++;
+      result.sessions++;
+      let raw;
+      try {
+        raw = import_fs31.default.readFileSync(import_path34.default.join(projPath, file), "utf-8");
+      } catch {
+        continue;
+      }
+      for (const line of raw.split("\n")) {
+        if (!line.trim()) continue;
+        let entry;
+        try {
+          entry = JSON.parse(line);
+        } catch {
+          continue;
+        }
+        if (entry.type !== "assistant") continue;
+        if (startDate && entry.timestamp) {
+          if (new Date(entry.timestamp) < startDate) continue;
+        }
+        if (entry.timestamp) {
+          if (!result.firstDate || entry.timestamp < result.firstDate)
+            result.firstDate = entry.timestamp;
+          if (!result.lastDate || entry.timestamp > result.lastDate)
+            result.lastDate = entry.timestamp;
+        }
+        const usage = entry.message?.usage;
+        const model = entry.message?.model;
+        if (usage && model) {
+          const p = claudeModelPrice2(model);
+          if (p) {
+            result.totalCostUSD += (usage.input_tokens ?? 0) * p.i + (usage.output_tokens ?? 0) * p.o + (usage.cache_creation_input_tokens ?? 0) * p.cw + (usage.cache_read_input_tokens ?? 0) * p.cr;
+          }
+        }
+        const content = entry.message?.content;
+        if (!Array.isArray(content)) continue;
+        for (const block of content) {
+          if (block.type !== "tool_use") continue;
+          result.totalToolCalls++;
+          const toolName = block.name ?? "";
+          const toolNameLower = toolName.toLowerCase();
+          const input = block.input ?? {};
+          if (toolNameLower === "bash" || toolNameLower === "execute_bash") {
+            result.bashCalls++;
+          }
+          const dlpMatch = scanArgs(input);
+          if (dlpMatch) {
+            const isDupe = result.dlpFindings.some(
+              (f) => f.patternName === dlpMatch.patternName && f.redactedSample === dlpMatch.redactedSample && f.project === projLabel
+            );
+            if (!isDupe) {
+              result.dlpFindings.push({
+                patternName: dlpMatch.patternName,
+                redactedSample: dlpMatch.redactedSample,
+                toolName,
+                timestamp: entry.timestamp ?? "",
+                project: projLabel
+              });
+            }
+          }
+          for (const source of ruleSources) {
+            const { rule } = source;
+            if (rule.tool && !matchesPattern(toolNameLower, rule.tool)) continue;
+            if (!evaluateSmartConditions(input, rule)) continue;
+            const inputPreview = preview(input, 120);
+            const isDupe = result.findings.some(
+              (f) => f.source.rule.name === rule.name && preview(f.input, 120) === inputPreview && f.project === projLabel
+            );
+            if (!isDupe) {
+              result.findings.push({
+                source,
+                toolName,
+                input,
+                timestamp: entry.timestamp ?? "",
+                project: projLabel
+              });
+            }
+            break;
+          }
+        }
+      }
+    }
+  }
+  return result;
+}
+function registerScanCommand(program2) {
+  program2.command("scan").description("Forecast: scan agent history and show what node9 would catch if installed").option("--all", "Scan all history (default: last 90 days)").option("--days <n>", "Scan last N days of history", "90").option("--top <n>", "Max findings to show per shield", "5").action((options) => {
+    const topN = Math.max(1, parseInt(options.top, 10) || 5);
+    const startDate = options.all ? null : (() => {
+      const d = /* @__PURE__ */ new Date();
+      d.setDate(d.getDate() - (parseInt(options.days, 10) || 90));
+      d.setHours(0, 0, 0, 0);
+      return d;
+    })();
+    console.log("");
+    console.log(import_chalk21.default.cyan.bold("\u{1F50D}  node9 scan") + import_chalk21.default.dim("  \u2014 what would node9 catch?"));
+    console.log("");
+    const projectsDir = import_path34.default.join(import_os27.default.homedir(), ".claude", "projects");
+    if (!import_fs31.default.existsSync(projectsDir)) {
+      console.log(import_chalk21.default.yellow("  No Claude history found at ~/.claude/projects/"));
+      console.log(import_chalk21.default.gray("  Install Claude Code, run a few sessions, then try again.\n"));
+      return;
+    }
+    process.stdout.write(import_chalk21.default.dim("  Scanning\u2026"));
+    const scan = scanClaudeHistory(startDate);
+    process.stdout.write("\r" + " ".repeat(20) + "\r");
+    if (scan.filesScanned === 0) {
+      console.log(import_chalk21.default.yellow("  No JSONL session files found.\n"));
+      return;
+    }
+    const rangeLabel = options.all ? import_chalk21.default.dim("all time") : import_chalk21.default.dim(`last ${options.days ?? 90} days`);
+    const dateRange = scan.firstDate && scan.lastDate ? import_chalk21.default.dim(`  ${fmtTs(scan.firstDate)} \u2013 ${fmtTs(scan.lastDate)}`) : "";
+    console.log(
+      "  " + import_chalk21.default.white(num2(scan.sessions)) + import_chalk21.default.dim(" sessions  ") + import_chalk21.default.white(num2(scan.totalToolCalls)) + import_chalk21.default.dim(" tool calls  ") + import_chalk21.default.white(num2(scan.bashCalls)) + import_chalk21.default.dim(" bash commands  ") + rangeLabel + dateRange
+    );
+    console.log("");
+    const byShield = /* @__PURE__ */ new Map();
+    for (const f of scan.findings) {
+      const key = f.source.shieldName;
+      const entry = byShield.get(key) ?? { label: f.source.shieldLabel, findings: [] };
+      entry.findings.push(f);
+      byShield.set(key, entry);
+    }
+    const totalFindings = scan.findings.length;
+    if (totalFindings === 0 && scan.dlpFindings.length === 0) {
+      console.log(import_chalk21.default.green("  \u2705 No findings across all shields and rules."));
+      console.log(import_chalk21.default.dim("  node9 is still worth running \u2014 it monitors in real time.\n"));
+    } else {
+      if (totalFindings > 0) {
+        console.log(
+          "  " + import_chalk21.default.bold("If node9 had been installed:") + "  " + import_chalk21.default.yellow.bold(
+            `${num2(totalFindings)} command${totalFindings !== 1 ? "s" : ""} flagged for review`
+          )
+        );
+        console.log("");
+        const sorted = [...byShield.entries()].sort(
+          (a, b) => b[1].findings.length - a[1].findings.length
+        );
+        for (const [shieldName, { label, findings }] of sorted) {
+          const count = findings.length;
+          const isUserRule = shieldName === "custom" || shieldName === "cloud";
+          const shieldBadge = isUserRule ? import_chalk21.default.magenta(label) : import_chalk21.default.cyan(label);
+          console.log("  " + import_chalk21.default.dim("\u2500".repeat(70)));
+          console.log(
+            "  " + shieldBadge + import_chalk21.default.dim("  \xB7  ") + import_chalk21.default.yellow(`${num2(count)} finding${count !== 1 ? "s" : ""}`) + (isUserRule ? "" : import_chalk21.default.dim(`  \u2192  node9 shield enable ${shieldName}`))
+          );
+          const byRule = /* @__PURE__ */ new Map();
+          for (const f of findings) {
+            const ruleKey = f.source.rule.name ?? "unnamed";
+            const arr = byRule.get(ruleKey) ?? [];
+            arr.push(f);
+            byRule.set(ruleKey, arr);
+          }
+          for (const [, ruleFindings] of byRule) {
+            const rule = ruleFindings[0].source.rule;
+            const ruleCount = ruleFindings.length;
+            const countBadge = ruleCount > 1 ? import_chalk21.default.white(` \xD7${ruleCount}`) : "";
+            const shortName = (rule.name ?? "unnamed").replace(/^shield:[^:]+:/, "");
+            console.log(
+              "    " + import_chalk21.default.white(shortName) + countBadge + (rule.reason ? import_chalk21.default.dim(`  \u2014 ${rule.reason}`) : "")
+            );
+            const shown = ruleFindings.slice(0, topN);
+            for (const f of shown) {
+              const ts = f.timestamp ? import_chalk21.default.dim(fmtTs(f.timestamp) + "  ") : "";
+              const proj = import_chalk21.default.dim(f.project.slice(0, 22).padEnd(22) + "  ");
+              const cmd = import_chalk21.default.gray(preview(f.input, 55));
+              console.log(`      ${ts}${proj}${cmd}`);
+            }
+            if (ruleFindings.length > topN) {
+              console.log(
+                import_chalk21.default.dim(
+                  `      \u2026 and ${ruleFindings.length - topN} more (--top ${ruleFindings.length})`
+                )
+              );
+            }
+          }
+          console.log("");
+        }
+      }
+      if (scan.dlpFindings.length > 0) {
+        console.log("  " + import_chalk21.default.dim("\u2500".repeat(70)));
+        console.log(
+          "  " + import_chalk21.default.red.bold("Secrets / DLP") + import_chalk21.default.dim("  \xB7  ") + import_chalk21.default.red(
+            `${num2(scan.dlpFindings.length)} potential secret leak${scan.dlpFindings.length !== 1 ? "s" : ""}`
+          )
+        );
+        const shownDlp = scan.dlpFindings.slice(0, topN);
+        for (const f of shownDlp) {
+          const ts = f.timestamp ? import_chalk21.default.dim(fmtTs(f.timestamp) + "  ") : "";
+          const proj = import_chalk21.default.dim(f.project.slice(0, 22).padEnd(22) + "  ");
+          console.log(
+            `    ${ts}${proj}` + import_chalk21.default.yellow(f.patternName) + import_chalk21.default.dim("  ") + import_chalk21.default.gray(f.redactedSample)
+          );
+        }
+        if (scan.dlpFindings.length > topN) {
+          console.log(
+            import_chalk21.default.dim(
+              `    \u2026 and ${scan.dlpFindings.length - topN} more (--top ${scan.dlpFindings.length})`
+            )
+          );
+        }
+        console.log("");
+      }
+    }
+    if (scan.totalCostUSD > 0) {
+      console.log(
+        "  " + import_chalk21.default.bold("Claude spend:") + "  " + import_chalk21.default.yellow(fmtCost2(scan.totalCostUSD)) + import_chalk21.default.dim("  (for per-period breakdown: node9 report)")
+      );
+      console.log("");
+    }
+    const auditLog = import_path34.default.join(import_os27.default.homedir(), ".node9", "audit.log");
+    if (import_fs31.default.existsSync(auditLog)) {
+      console.log(import_chalk21.default.green("  \u2705 node9 is active \u2014 future sessions are protected."));
+      console.log(
+        import_chalk21.default.dim("  Run ") + import_chalk21.default.cyan("node9 report") + import_chalk21.default.dim(" to see live stats.")
+      );
+    } else {
+      console.log(import_chalk21.default.yellow.bold("  \u26A1 node9 was not running during these sessions."));
+      console.log(
+        "  " + import_chalk21.default.white("Run ") + import_chalk21.default.cyan("node9 init") + import_chalk21.default.white(" to start protecting your AI agents.")
+      );
+    }
+    console.log("");
+  });
+}
+
+// src/cli/commands/sessions.ts
+var import_chalk22 = __toESM(require("chalk"));
+var import_fs32 = __toESM(require("fs"));
+var import_path35 = __toESM(require("path"));
+var import_os28 = __toESM(require("os"));
+var CLAUDE_PRICING3 = {
+  "claude-opus-4-6": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
+  "claude-opus-4-5": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
+  "claude-opus-4": { i: 15e-6, o: 75e-6, cw: 1875e-8, cr: 15e-7 },
+  "claude-sonnet-4-6": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
+  "claude-sonnet-4-5": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
+  "claude-sonnet-4": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
+  "claude-3-7-sonnet": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
+  "claude-3-5-sonnet": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
+  "claude-haiku-4-5": { i: 1e-6, o: 5e-6, cw: 125e-8, cr: 1e-7 },
+  "claude-3-5-haiku": { i: 8e-7, o: 4e-6, cw: 1e-6, cr: 8e-8 }
+};
+function modelPrice(model) {
+  const base = model.replace(/@.*$/, "").replace(/-\d{8}$/, "");
+  for (const [key, p] of Object.entries(CLAUDE_PRICING3)) {
+    if (base === key || base.startsWith(key)) return p;
+  }
+  return null;
+}
+function encodeProjectPath(projectPath) {
+  return projectPath.replace(/\//g, "-");
+}
+function sessionJsonlPath(projectPath, sessionId) {
+  const encoded = encodeProjectPath(projectPath);
+  return import_path35.default.join(import_os28.default.homedir(), ".claude", "projects", encoded, `${sessionId}.jsonl`);
+}
+function projectLabel(projectPath) {
+  return projectPath.replace(import_os28.default.homedir(), "~");
+}
+function parseHistoryLines(lines) {
+  const entries = [];
+  for (const line of lines) {
+    if (!line.trim()) continue;
+    try {
+      const obj = JSON.parse(line);
+      if (typeof obj["display"] === "string" && (typeof obj["timestamp"] === "string" || typeof obj["timestamp"] === "number") && typeof obj["project"] === "string" && typeof obj["sessionId"] === "string") {
+        const ts = typeof obj["timestamp"] === "number" ? new Date(obj["timestamp"]).toISOString() : obj["timestamp"];
+        entries.push({
+          display: obj["display"],
+          timestamp: ts,
+          project: obj["project"],
+          sessionId: obj["sessionId"]
+        });
+      }
+    } catch {
+    }
+  }
+  return entries;
+}
+function parseSessionLines(lines) {
+  const toolCalls = [];
+  let costUSD = 0;
+  let hasSnapshot = false;
+  const modifiedFiles = [];
+  const seenFiles = /* @__PURE__ */ new Set();
+  for (const line of lines) {
+    if (!line.trim()) continue;
+    let entry;
+    try {
+      entry = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    if (entry.type === "file-history-snapshot") {
+      hasSnapshot = true;
+      continue;
+    }
+    if (entry.type !== "assistant") continue;
+    const usage = entry.message?.usage;
+    const model = entry.message?.model;
+    if (usage && model) {
+      const p = modelPrice(model);
+      if (p) {
+        costUSD += (usage.input_tokens ?? 0) * p.i + (usage.output_tokens ?? 0) * p.o + (usage.cache_creation_input_tokens ?? 0) * p.cw + (usage.cache_read_input_tokens ?? 0) * p.cr;
+      }
+    }
+    const content = entry.message?.content;
+    if (!Array.isArray(content)) continue;
+    for (const block of content) {
+      if (block.type !== "tool_use") continue;
+      const tool = block.name ?? "";
+      const input = block.input ?? {};
+      toolCalls.push({ tool, input, timestamp: entry.timestamp ?? "" });
+      const toolLower = tool.toLowerCase();
+      if (toolLower === "write" || toolLower === "edit" || toolLower === "notebookedit") {
+        const fp = input.file_path ?? input.path;
+        if (typeof fp === "string" && !seenFiles.has(fp)) {
+          seenFiles.add(fp);
+          modifiedFiles.push(fp);
+        }
+      }
+    }
+  }
+  return { toolCalls, costUSD, hasSnapshot, modifiedFiles };
+}
+function loadAuditEntries(auditPath) {
+  const aPath = auditPath ?? import_path35.default.join(import_os28.default.homedir(), ".node9", "audit.log");
+  let raw;
+  try {
+    raw = import_fs32.default.readFileSync(aPath, "utf-8");
+  } catch {
+    return [];
+  }
+  const entries = [];
+  for (const line of raw.split("\n")) {
+    if (!line.trim()) continue;
+    try {
+      const e = JSON.parse(line);
+      if (!e.ts || !e.tool || !e.decision) continue;
+      if (e.decision === "allow" || e.decision === "allowed") continue;
+      entries.push(e);
+    } catch {
+    }
+  }
+  return entries;
+}
+function auditEntriesInWindow(entries, windowStart, windowEnd) {
+  const start = new Date(windowStart).getTime();
+  const end = new Date(windowEnd).getTime();
+  const result = [];
+  for (const e of entries) {
+    const t = new Date(e.ts).getTime();
+    if (t < start || t > end) continue;
+    result.push({
+      tool: e.tool,
+      args: e.args,
+      argsHash: e.argsHash,
+      timestamp: e.ts,
+      decision: e.decision,
+      checkedBy: e.checkedBy
+    });
+  }
+  return result;
+}
+function buildSessions(days, historyPath) {
+  const hPath = historyPath ?? import_path35.default.join(import_os28.default.homedir(), ".claude", "history.jsonl");
+  let historyRaw;
+  try {
+    historyRaw = import_fs32.default.readFileSync(hPath, "utf-8");
+  } catch {
+    return [];
+  }
+  const cutoff = days !== null ? (() => {
+    const d = /* @__PURE__ */ new Date();
+    d.setDate(d.getDate() - days);
+    d.setHours(0, 0, 0, 0);
+    return d;
+  })() : null;
+  const entries = parseHistoryLines(historyRaw.split("\n"));
+  const bySession = /* @__PURE__ */ new Map();
+  for (const e of entries) {
+    if (cutoff && new Date(e.timestamp) < cutoff) continue;
+    const existing = bySession.get(e.sessionId);
+    if (!existing || e.timestamp < existing.timestamp) {
+      bySession.set(e.sessionId, e);
+    }
+  }
+  const allAuditEntries = loadAuditEntries();
+  const summaries = [];
+  for (const entry of bySession.values()) {
+    const jsonlFile = sessionJsonlPath(entry.project, entry.sessionId);
+    let sessionLines = [];
+    try {
+      sessionLines = import_fs32.default.readFileSync(jsonlFile, "utf-8").split("\n");
+    } catch {
+    }
+    const { toolCalls, costUSD, hasSnapshot, modifiedFiles } = parseSessionLines(sessionLines);
+    const windowStart = entry.timestamp;
+    const lastToolTs = toolCalls.length > 0 ? toolCalls[toolCalls.length - 1].timestamp : "";
+    const windowEnd = new Date(
+      Math.max(new Date(windowStart).getTime(), lastToolTs ? new Date(lastToolTs).getTime() : 0) + 5 * 60 * 1e3
+      // 5 min buffer
+    ).toISOString();
+    const blockedCalls = auditEntriesInWindow(allAuditEntries, windowStart, windowEnd);
+    summaries.push({
+      sessionId: entry.sessionId,
+      project: entry.project,
+      projectLabel: projectLabel(entry.project),
+      firstPrompt: entry.display,
+      startTime: entry.timestamp,
+      toolCalls,
+      blockedCalls,
+      costUSD,
+      hasSnapshot,
+      modifiedFiles
+    });
+  }
+  summaries.sort((a, b) => a.startTime > b.startTime ? -1 : 1);
+  return summaries;
+}
+function fmtCost3(usd) {
+  if (usd === 0) return "";
+  if (usd < 1e-3) return "< $0.001";
+  if (usd < 1) return "$" + usd.toFixed(3);
+  return "$" + usd.toFixed(2);
+}
+function fmtDate2(iso) {
+  try {
+    return new Date(iso).toLocaleDateString("en-US", { month: "short", day: "numeric" });
+  } catch {
+    return iso.slice(0, 10);
+  }
+}
+function fmtTime(iso) {
+  try {
+    return new Date(iso).toLocaleTimeString("en-US", {
+      hour: "2-digit",
+      minute: "2-digit",
+      hour12: false
+    });
+  } catch {
+    return iso.slice(11, 16);
+  }
+}
+function fmtDateTime(iso) {
+  try {
+    return new Date(iso).toLocaleString("en-US", {
+      month: "short",
+      day: "numeric",
+      year: "numeric",
+      hour: "2-digit",
+      minute: "2-digit",
+      hour12: false
+    });
+  } catch {
+    return iso;
+  }
+}
+function truncate(s, max) {
+  return s.length > max ? s.slice(0, max - 1) + "\u2026" : s;
+}
+function toolInputSummary(tool, input) {
+  const fp = input.file_path ?? input.path;
+  if (typeof fp === "string") return fp;
+  const cmd = input.command;
+  if (typeof cmd === "string") return truncate(cmd.replace(/\s+/g, " "), 60);
+  const q = input.query ?? input.url;
+  if (typeof q === "string") return truncate(String(q), 60);
+  return "";
+}
+function toolColor(tool) {
+  const t = tool.toLowerCase();
+  if (t === "bash" || t === "execute_bash") return import_chalk22.default.red;
+  if (t === "write") return import_chalk22.default.green;
+  if (t === "edit" || t === "notebookedit") return import_chalk22.default.yellow;
+  if (t === "read") return import_chalk22.default.cyan;
+  return import_chalk22.default.gray;
+}
+function barStr2(value, max, width) {
+  if (max === 0 || width <= 0) return "\u2591".repeat(width);
+  const filled = Math.max(1, Math.round(value / max * width));
+  return "\u2588".repeat(filled) + "\u2591".repeat(width - filled);
+}
+function colorBar2(value, max, width) {
+  const s = barStr2(value, max, width);
+  const filled = Math.max(1, Math.round(max > 0 ? value / max * width : 0));
+  return import_chalk22.default.cyan(s.slice(0, filled)) + import_chalk22.default.dim(s.slice(filled));
+}
+function renderSummary(summaries) {
+  const totalTools = summaries.reduce((n, s) => n + s.toolCalls.length, 0);
+  const totalCost = summaries.reduce((n, s) => n + s.costUSD, 0);
+  const totalFiles = summaries.reduce((n, s) => n + s.modifiedFiles.length, 0);
+  const totalBlocked = summaries.reduce((n, s) => n + s.blockedCalls.length, 0);
+  const snapshots = summaries.filter((s) => s.hasSnapshot).length;
+  const avgCost = summaries.length > 0 ? totalCost / summaries.length : 0;
+  const toolCounts = /* @__PURE__ */ new Map();
+  for (const s of summaries) {
+    for (const tc of s.toolCalls) {
+      const key = tc.tool.toLowerCase();
+      toolCounts.set(key, (toolCounts.get(key) ?? 0) + 1);
+    }
+  }
+  const groups = { Bash: 0, Read: 0, Write: 0, Edit: 0, Other: 0 };
+  for (const [tool, count] of toolCounts) {
+    if (tool === "bash" || tool === "execute_bash") groups["Bash"] += count;
+    else if (tool === "read") groups["Read"] += count;
+    else if (tool === "write") groups["Write"] += count;
+    else if (tool === "edit" || tool === "notebookedit") groups["Edit"] += count;
+    else groups["Other"] += count;
+  }
+  const projCosts = /* @__PURE__ */ new Map();
+  for (const s of summaries) {
+    projCosts.set(s.projectLabel, (projCosts.get(s.projectLabel) ?? 0) + s.costUSD);
+  }
+  const topProjects = [...projCosts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
+  const W = 20;
+  console.log(import_chalk22.default.dim("  " + "\u2500".repeat(70)));
+  console.log(
+    "  " + import_chalk22.default.bold.white(String(summaries.length).padEnd(4)) + import_chalk22.default.dim("sessions    ") + import_chalk22.default.bold.yellow(fmtCost3(totalCost).padEnd(10)) + import_chalk22.default.dim("total    ") + import_chalk22.default.bold.white(String(totalTools).padEnd(6)) + import_chalk22.default.dim("tool calls    ") + import_chalk22.default.bold.white(String(totalFiles)) + import_chalk22.default.dim(" files modified") + (totalBlocked > 0 ? import_chalk22.default.dim("    ") + import_chalk22.default.red.bold(String(totalBlocked)) + import_chalk22.default.dim(" blocked by node9") : "")
+  );
+  console.log(
+    "  " + import_chalk22.default.dim("avg ") + import_chalk22.default.white(fmtCost3(avgCost).padEnd(10)) + import_chalk22.default.dim("/session    ") + import_chalk22.default.green(String(snapshots)) + import_chalk22.default.dim(` of ${summaries.length} sessions had snapshots`)
+  );
+  console.log("");
+  console.log("  " + import_chalk22.default.dim("Tool breakdown:"));
+  const maxGroup = Math.max(...Object.values(groups));
+  for (const [label, count] of Object.entries(groups)) {
+    if (count === 0) continue;
+    const pct2 = totalTools > 0 ? Math.round(count / totalTools * 100) : 0;
+    console.log(
+      "    " + label.padEnd(6) + "  " + colorBar2(count, maxGroup, W) + "  " + import_chalk22.default.white(String(count).padStart(4)) + import_chalk22.default.dim(` (${String(pct2)}%)`)
+    );
+  }
+  console.log("");
+  if (topProjects.length > 1) {
+    console.log("  " + import_chalk22.default.dim("Cost by project:"));
+    const maxProjCost = topProjects[0][1];
+    for (const [proj, cost] of topProjects) {
+      console.log(
+        "    " + proj.slice(0, 28).padEnd(28) + "  " + colorBar2(cost, maxProjCost, W) + "  " + import_chalk22.default.yellow(fmtCost3(cost))
+      );
+    }
+    console.log("");
+  }
+  console.log(import_chalk22.default.dim("  " + "\u2500".repeat(70)));
+  console.log("");
+}
+function renderList(summaries, totalCost) {
+  if (summaries.length === 0) {
+    console.log(import_chalk22.default.yellow("  No sessions found in the requested range.\n"));
+    return;
+  }
+  const totalLabel = totalCost > 0 ? import_chalk22.default.dim("  ~" + fmtCost3(totalCost) + " total") : "";
+  console.log(
+    "  " + import_chalk22.default.white(String(summaries.length)) + import_chalk22.default.dim(` session${summaries.length !== 1 ? "s" : ""}`) + totalLabel
+  );
+  console.log("");
+  let lastGroup = "";
+  for (const s of summaries) {
+    const group = fmtDate2(s.startTime) + "  " + s.projectLabel;
+    if (group !== lastGroup) {
+      console.log(
+        import_chalk22.default.dim("  \u2500\u2500\u2500 ") + import_chalk22.default.bold(fmtDate2(s.startTime)) + import_chalk22.default.dim("  " + s.projectLabel)
+      );
+      lastGroup = group;
+    }
+    const timeStr = import_chalk22.default.dim(fmtTime(s.startTime));
+    const prompt = import_chalk22.default.white(truncate(s.firstPrompt.replace(/\n/g, " "), 50).padEnd(50));
+    const tools = s.toolCalls.length > 0 ? import_chalk22.default.dim(String(s.toolCalls.length).padStart(3) + " tools") : import_chalk22.default.dim("  0 tools");
+    const cost = s.costUSD > 0 ? import_chalk22.default.dim("  " + fmtCost3(s.costUSD).padEnd(8)) : "          ";
+    const blocked = s.blockedCalls.length > 0 ? import_chalk22.default.red("  \u{1F6D1} " + String(s.blockedCalls.length)) : "";
+    const snap = s.hasSnapshot ? import_chalk22.default.green("  \u{1F4F8}") : "";
+    const sid = import_chalk22.default.dim("  " + s.sessionId.slice(0, 8));
+    console.log(`  ${timeStr}  ${prompt}  ${tools}${cost}${blocked}${snap}${sid}`);
+  }
+  console.log("");
+  console.log(
+    import_chalk22.default.dim("  Run") + " " + import_chalk22.default.cyan("node9 sessions --detail <session-id>") + import_chalk22.default.dim(" for full tool trace.")
+  );
+  console.log("");
+}
+function renderDetail(s) {
+  console.log("");
+  console.log(import_chalk22.default.bold("  Session  ") + import_chalk22.default.dim(s.sessionId));
+  console.log(
+    import_chalk22.default.bold("  Prompt   ") + import_chalk22.default.white(s.firstPrompt.replace(/\n/g, " ").slice(0, 120))
+  );
+  console.log(import_chalk22.default.bold("  Project  ") + import_chalk22.default.white(s.projectLabel));
+  console.log(import_chalk22.default.bold("  When     ") + import_chalk22.default.white(fmtDateTime(s.startTime)));
+  if (s.costUSD > 0)
+    console.log(import_chalk22.default.bold("  Cost     ") + import_chalk22.default.yellow("~" + fmtCost3(s.costUSD)));
+  console.log(
+    import_chalk22.default.bold("  Snapshot ") + (s.hasSnapshot ? import_chalk22.default.green("\u2713 taken") : import_chalk22.default.dim("none"))
+  );
+  console.log("");
+  if (s.toolCalls.length === 0 && s.blockedCalls.length === 0) {
+    console.log(import_chalk22.default.dim("  No tool calls recorded.\n"));
+    return;
+  }
+  const timeline = [
+    ...s.toolCalls.map((tc) => ({ kind: "tool", tc })),
+    ...s.blockedCalls.map((bc) => ({ kind: "blocked", bc }))
+  ].sort((a, b) => {
+    const ta = a.kind === "tool" ? a.tc.timestamp : a.bc.timestamp;
+    const tb = b.kind === "tool" ? b.tc.timestamp : b.bc.timestamp;
+    return ta < tb ? -1 : ta > tb ? 1 : 0;
+  });
+  const headerParts = [`Tool calls (${s.toolCalls.length})`];
+  if (s.blockedCalls.length > 0)
+    headerParts.push(import_chalk22.default.red(`${s.blockedCalls.length} blocked by node9`));
+  console.log(import_chalk22.default.bold("  " + headerParts.join("  \xB7  ")));
+  console.log("");
+  for (const entry of timeline) {
+    if (entry.kind === "tool") {
+      const tc = entry.tc;
+      const colorFn = toolColor(tc.tool);
+      const toolPad = colorFn(tc.tool.padEnd(16));
+      const detail = import_chalk22.default.gray(truncate(toolInputSummary(tc.tool, tc.input), 70));
+      const ts = tc.timestamp ? import_chalk22.default.dim(fmtTime(tc.timestamp) + "  ") : "       ";
+      console.log(`    ${ts}${toolPad}  ${detail}`);
+    } else {
+      const bc = entry.bc;
+      const ts = bc.timestamp ? import_chalk22.default.dim(fmtTime(bc.timestamp) + "  ") : "       ";
+      const label = import_chalk22.default.red("\u{1F6D1} BLOCKED".padEnd(16));
+      const toolName = import_chalk22.default.red(bc.tool.padEnd(10));
+      const argsSummary = bc.args ? import_chalk22.default.gray(truncate(toolInputSummary(bc.tool, bc.args), 40)) : import_chalk22.default.dim("[args not logged]");
+      const reason = bc.checkedBy ? import_chalk22.default.dim("  \u2190 " + bc.checkedBy) : "";
+      console.log(`    ${ts}${label}  ${toolName}  ${argsSummary}${reason}`);
+    }
+  }
+  console.log("");
+  if (s.modifiedFiles.length > 0) {
+    console.log(import_chalk22.default.bold(`  Files modified (${s.modifiedFiles.length}):`));
+    for (const f of s.modifiedFiles) {
+      console.log("    " + import_chalk22.default.yellow(f));
+    }
+    console.log("");
+  }
+}
+function registerSessionsCommand(program2) {
+  program2.command("sessions").description("Show what your AI agent did \u2014 sessions, tool calls, cost, and file changes").option("--all", "Show all sessions (default: last 7 days)").option("--days <n>", "Show last N days of sessions", "7").option("--detail <sessionId>", "Show full tool trace for a session").action((options) => {
+    console.log("");
+    console.log(import_chalk22.default.cyan.bold("\u{1F4CB}  node9 sessions") + import_chalk22.default.dim("  \u2014 what your AI agent did"));
+    console.log("");
+    const historyPath = import_path35.default.join(import_os28.default.homedir(), ".claude", "history.jsonl");
+    if (!import_fs32.default.existsSync(historyPath)) {
+      console.log(import_chalk22.default.yellow("  No Claude session history found at ~/.claude/history.jsonl"));
+      console.log(import_chalk22.default.gray("  Install Claude Code, run a few sessions, then try again.\n"));
+      return;
+    }
+    const days = options.detail || options.all ? null : Math.max(1, parseInt(options.days, 10) || 7);
+    const rangeLabel = options.detail ? "all time" : options.all ? "all time" : `last ${String(days)} days`;
+    console.log(import_chalk22.default.dim("  " + rangeLabel));
+    console.log("");
+    process.stdout.write(import_chalk22.default.dim("  Loading\u2026"));
+    const summaries = buildSessions(days);
+    process.stdout.write("\r" + " ".repeat(20) + "\r");
+    if (options.detail) {
+      const target = summaries.find(
+        (s) => s.sessionId === options.detail || s.sessionId.startsWith(options.detail)
+      );
+      if (!target) {
+        console.log(import_chalk22.default.red(`  Session not found: ${options.detail}`));
+        console.log(import_chalk22.default.dim("  Run `node9 sessions` to list recent sessions.\n"));
+        return;
+      }
+      renderDetail(target);
+      return;
+    }
+    const totalCost = summaries.reduce((sum, s) => sum + s.costUSD, 0);
+    if (summaries.length > 0) renderSummary(summaries);
+    renderList(summaries, totalCost);
+  });
+}
+
 // src/cli.ts
 var { version } = JSON.parse(
-  import_fs31.default.readFileSync(import_path34.default.join(__dirname, "../package.json"), "utf-8")
+  import_fs35.default.readFileSync(import_path38.default.join(__dirname, "../package.json"), "utf-8")
 );
 var program = new import_commander.Command();
 program.name("node9").description("The Sudo Command for AI Agents").version(version);
 program.command("login").argument("<apiKey>").option("--local", "Save key for audit/logging only \u2014 local config still controls all decisions").option("--profile <name>", 'Save as a named profile (default: "default")').action((apiKey, options) => {
-  const DEFAULT_API_URL = "https://api.node9.ai/api/v1/intercept";
-  const credPath = import_path34.default.join(import_os27.default.homedir(), ".node9", "credentials.json");
-  if (!import_fs31.default.existsSync(import_path34.default.dirname(credPath)))
-    import_fs31.default.mkdirSync(import_path34.default.dirname(credPath), { recursive: true });
+  const DEFAULT_API_URL2 = "https://api.node9.ai/api/v1/intercept";
+  const credPath = import_path38.default.join(import_os31.default.homedir(), ".node9", "credentials.json");
+  if (!import_fs35.default.existsSync(import_path38.default.dirname(credPath)))
+    import_fs35.default.mkdirSync(import_path38.default.dirname(credPath), { recursive: true });
   const profileName = options.profile || "default";
   let existingCreds = {};
   try {
-    if (import_fs31.default.existsSync(credPath)) {
-      const raw = JSON.parse(import_fs31.default.readFileSync(credPath, "utf-8"));
+    if (import_fs35.default.existsSync(credPath)) {
+      const raw = JSON.parse(import_fs35.default.readFileSync(credPath, "utf-8"));
       if (raw.apiKey) {
         existingCreds = {
-          default: { apiKey: raw.apiKey, apiUrl: raw.apiUrl || DEFAULT_API_URL }
+          default: { apiKey: raw.apiKey, apiUrl: raw.apiUrl || DEFAULT_API_URL2 }
         };
       } else {
         existingCreds = raw;
@@ -12538,14 +14296,14 @@ program.command("login").argument("<apiKey>").option("--local", "Save key for au
     }
   } catch {
   }
-  existingCreds[profileName] = { apiKey, apiUrl: DEFAULT_API_URL };
-  import_fs31.default.writeFileSync(credPath, JSON.stringify(existingCreds, null, 2), { mode: 384 });
+  existingCreds[profileName] = { apiKey, apiUrl: DEFAULT_API_URL2 };
+  import_fs35.default.writeFileSync(credPath, JSON.stringify(existingCreds, null, 2), { mode: 384 });
   if (profileName === "default") {
-    const configPath = import_path34.default.join(import_os27.default.homedir(), ".node9", "config.json");
+    const configPath = import_path38.default.join(import_os31.default.homedir(), ".node9", "config.json");
     let config = {};
     try {
-      if (import_fs31.default.existsSync(configPath))
-        config = JSON.parse(import_fs31.default.readFileSync(configPath, "utf-8"));
+      if (import_fs35.default.existsSync(configPath))
+        config = JSON.parse(import_fs35.default.readFileSync(configPath, "utf-8"));
     } catch {
     }
     if (!config.settings || typeof config.settings !== "object") config.settings = {};
@@ -12560,39 +14318,47 @@ program.command("login").argument("<apiKey>").option("--local", "Save key for au
       approvers.cloud = false;
     }
     s.approvers = approvers;
-    if (!import_fs31.default.existsSync(import_path34.default.dirname(configPath)))
-      import_fs31.default.mkdirSync(import_path34.default.dirname(configPath), { recursive: true });
-    import_fs31.default.writeFileSync(configPath, JSON.stringify(config, null, 2), { mode: 384 });
+    if (!import_fs35.default.existsSync(import_path38.default.dirname(configPath)))
+      import_fs35.default.mkdirSync(import_path38.default.dirname(configPath), { recursive: true });
+    import_fs35.default.writeFileSync(configPath, JSON.stringify(config, null, 2), { mode: 384 });
   }
   if (options.profile && profileName !== "default") {
-    console.log(import_chalk20.default.green(`\u2705 Profile "${profileName}" saved`));
-    console.log(import_chalk20.default.gray(`   Switch to it per-session:  NODE9_PROFILE=${profileName} claude`));
+    console.log(import_chalk24.default.green(`\u2705 Profile "${profileName}" saved`));
+    console.log(import_chalk24.default.gray(`   Switch to it per-session:  NODE9_PROFILE=${profileName} claude`));
   } else if (options.local) {
-    console.log(import_chalk20.default.green(`\u2705 Privacy mode \u{1F6E1}\uFE0F`));
-    console.log(import_chalk20.default.gray(`   All decisions stay on this machine.`));
+    console.log(import_chalk24.default.green(`\u2705 Privacy mode \u{1F6E1}\uFE0F`));
+    console.log(import_chalk24.default.gray(`   All decisions stay on this machine.`));
   } else {
-    console.log(import_chalk20.default.green(`\u2705 Logged in \u2014 agent mode`));
-    console.log(import_chalk20.default.gray(`   Team policy enforced for all calls via Node9 cloud.`));
+    console.log(import_chalk24.default.green(`\u2705 Logged in \u2014 agent mode`));
+    console.log(import_chalk24.default.gray(`   Team policy enforced for all calls via Node9 cloud.`));
   }
 });
-program.command("addto").description("Integrate Node9 with an AI agent").addHelpText("after", "\n  Supported targets:  claude  gemini  cursor  hud").argument("<target>", "The agent to protect: claude | gemini | cursor | hud").action(async (target) => {
+program.command("addto").description("Integrate Node9 with an AI agent").addHelpText("after", "\n  Supported targets:  claude  gemini  cursor  windsurf  vscode  hud").argument("<target>", "The agent to protect: claude | gemini | cursor | windsurf | vscode | hud").action(async (target) => {
   if (target === "gemini") return await setupGemini();
   if (target === "claude") return await setupClaude();
   if (target === "cursor") return await setupCursor();
+  if (target === "windsurf") return await setupWindsurf();
+  if (target === "vscode") return await setupVSCode();
   if (target === "hud") return setupHud();
-  console.error(import_chalk20.default.red(`Unknown target: "${target}". Supported: claude, gemini, cursor, hud`));
+  console.error(
+    import_chalk24.default.red(
+      `Unknown target: "${target}". Supported: claude, gemini, cursor, windsurf, vscode, hud`
+    )
+  );
   process.exit(1);
 });
-program.command("setup").description('Alias for "addto" \u2014 integrate Node9 with an AI agent').addHelpText("after", "\n  Supported targets:  claude  gemini  cursor  hud").argument("[target]", "The agent to protect: claude | gemini | cursor | hud").action(async (target) => {
+program.command("setup").description('Alias for "addto" \u2014 integrate Node9 with an AI agent').addHelpText("after", "\n  Supported targets:  claude  gemini  cursor  windsurf  vscode  hud").argument("[target]", "The agent to protect: claude | gemini | cursor | windsurf | vscode | hud").action(async (target) => {
   if (!target) {
-    console.log(import_chalk20.default.cyan("\n\u{1F6E1}\uFE0F  Node9 Setup \u2014 integrate with your AI agent\n"));
-    console.log("  Usage:  " + import_chalk20.default.white("node9 setup <target>") + "\n");
+    console.log(import_chalk24.default.cyan("\n\u{1F6E1}\uFE0F  Node9 Setup \u2014 integrate with your AI agent\n"));
+    console.log("  Usage:  " + import_chalk24.default.white("node9 setup <target>") + "\n");
     console.log("  Targets:");
-    console.log("    " + import_chalk20.default.green("claude") + "   \u2014 Claude Code (hook mode)");
-    console.log("    " + import_chalk20.default.green("gemini") + "   \u2014 Gemini CLI (hook mode)");
-    console.log("    " + import_chalk20.default.green("cursor") + "   \u2014 Cursor (hook mode)");
+    console.log("    " + import_chalk24.default.green("claude") + "    \u2014 Claude Code (hook mode)");
+    console.log("    " + import_chalk24.default.green("gemini") + "    \u2014 Gemini CLI (hook mode)");
+    console.log("    " + import_chalk24.default.green("cursor") + "    \u2014 Cursor (MCP proxy)");
+    console.log("    " + import_chalk24.default.green("windsurf") + "  \u2014 Windsurf (MCP proxy)");
+    console.log("    " + import_chalk24.default.green("vscode") + "    \u2014 VSCode / Copilot (MCP proxy)");
     process.stdout.write(
-      "    " + import_chalk20.default.green("hud") + "     \u2014 Claude Code security statusline\n"
+      "    " + import_chalk24.default.green("hud") + "       \u2014 Claude Code security statusline\n"
     );
     console.log("");
     return;
@@ -12601,93 +14367,108 @@ program.command("setup").description('Alias for "addto" \u2014 integrate Node9 w
   if (t === "gemini") return await setupGemini();
   if (t === "claude") return await setupClaude();
   if (t === "cursor") return await setupCursor();
+  if (t === "windsurf") return await setupWindsurf();
+  if (t === "vscode") return await setupVSCode();
   if (t === "hud") return setupHud();
-  console.error(import_chalk20.default.red(`Unknown target: "${target}". Supported: claude, gemini, cursor, hud`));
+  console.error(
+    import_chalk24.default.red(
+      `Unknown target: "${target}". Supported: claude, gemini, cursor, windsurf, vscode, hud`
+    )
+  );
   process.exit(1);
 });
-program.command("removefrom").description("Remove Node9 hooks from an AI agent configuration").addHelpText("after", "\n  Supported targets:  claude  gemini  cursor").argument("<target>", "The agent to remove from: claude | gemini | cursor").action((target) => {
+program.command("removefrom").description("Remove Node9 hooks from an AI agent configuration").addHelpText("after", "\n  Supported targets:  claude  gemini  cursor  windsurf  vscode  hud").argument(
+  "<target>",
+  "The agent to remove from: claude | gemini | cursor | windsurf | vscode | hud"
+).action((target) => {
   let fn;
   if (target === "claude") fn = teardownClaude;
   else if (target === "gemini") fn = teardownGemini;
   else if (target === "cursor") fn = teardownCursor;
+  else if (target === "windsurf") fn = teardownWindsurf;
+  else if (target === "vscode") fn = teardownVSCode;
   else if (target === "hud") fn = teardownHud;
   else {
     console.error(
-      import_chalk20.default.red(`Unknown target: "${target}". Supported: claude, gemini, cursor, hud`)
+      import_chalk24.default.red(
+        `Unknown target: "${target}". Supported: claude, gemini, cursor, windsurf, vscode, hud`
+      )
     );
     process.exit(1);
   }
-  console.log(import_chalk20.default.cyan(`
+  console.log(import_chalk24.default.cyan(`
 \u{1F6E1}\uFE0F  Node9: removing hooks from ${target}...
 `));
   try {
     fn();
   } catch (err2) {
-    console.error(import_chalk20.default.red(`  \u26A0\uFE0F  Failed: ${err2 instanceof Error ? err2.message : String(err2)}`));
+    console.error(import_chalk24.default.red(`  \u26A0\uFE0F  Failed: ${err2 instanceof Error ? err2.message : String(err2)}`));
     process.exit(1);
   }
-  console.log(import_chalk20.default.gray("\n  Restart the agent for changes to take effect."));
+  console.log(import_chalk24.default.gray("\n  Restart the agent for changes to take effect."));
 });
 program.command("uninstall").description("Remove all Node9 hooks and optionally delete config files").option("--purge", "Also delete ~/.node9/ directory (config, audit log, credentials)").action(async (options) => {
-  console.log(import_chalk20.default.cyan("\n\u{1F6E1}\uFE0F  Node9 Uninstall\n"));
-  console.log(import_chalk20.default.bold("Stopping daemon..."));
+  console.log(import_chalk24.default.cyan("\n\u{1F6E1}\uFE0F  Node9 Uninstall\n"));
+  console.log(import_chalk24.default.bold("Stopping daemon..."));
   try {
     stopDaemon();
-    console.log(import_chalk20.default.green("  \u2705 Daemon stopped"));
+    console.log(import_chalk24.default.green("  \u2705 Daemon stopped"));
   } catch {
-    console.log(import_chalk20.default.blue("  \u2139\uFE0F  Daemon was not running"));
+    console.log(import_chalk24.default.blue("  \u2139\uFE0F  Daemon was not running"));
   }
-  console.log(import_chalk20.default.bold("\nRemoving hooks..."));
+  console.log(import_chalk24.default.bold("\nRemoving hooks..."));
   let teardownFailed = false;
   for (const [label, fn] of [
     ["Claude", teardownClaude],
     ["Gemini", teardownGemini],
-    ["Cursor", teardownCursor]
+    ["Cursor", teardownCursor],
+    ["Windsurf", teardownWindsurf],
+    ["VSCode", teardownVSCode]
   ]) {
     try {
       fn();
     } catch (err2) {
       teardownFailed = true;
       console.error(
-        import_chalk20.default.red(
+        import_chalk24.default.red(
           `  \u26A0\uFE0F  Failed to remove ${label} hooks: ${err2 instanceof Error ? err2.message : String(err2)}`
         )
       );
     }
   }
   if (options.purge) {
-    const node9Dir = import_path34.default.join(import_os27.default.homedir(), ".node9");
-    if (import_fs31.default.existsSync(node9Dir)) {
+    const node9Dir = import_path38.default.join(import_os31.default.homedir(), ".node9");
+    if (import_fs35.default.existsSync(node9Dir)) {
       const confirmed = await (0, import_prompts2.confirm)({
         message: `Permanently delete ${node9Dir} (config, audit log, credentials)?`,
         default: false
       });
       if (confirmed) {
-        import_fs31.default.rmSync(node9Dir, { recursive: true });
-        if (import_fs31.default.existsSync(node9Dir)) {
+        import_fs35.default.rmSync(node9Dir, { recursive: true });
+        if (import_fs35.default.existsSync(node9Dir)) {
           console.error(
-            import_chalk20.default.red("\n  \u26A0\uFE0F  ~/.node9/ could not be fully deleted \u2014 remove it manually.")
+            import_chalk24.default.red("\n  \u26A0\uFE0F  ~/.node9/ could not be fully deleted \u2014 remove it manually.")
           );
         } else {
-          console.log(import_chalk20.default.green("\n  \u2705 Deleted ~/.node9/ (config, audit log, credentials)"));
+          console.log(import_chalk24.default.green("\n  \u2705 Deleted ~/.node9/ (config, audit log, credentials)"));
         }
       } else {
-        console.log(import_chalk20.default.yellow("\n  Skipped \u2014 ~/.node9/ was not deleted."));
+        console.log(import_chalk24.default.yellow("\n  Skipped \u2014 ~/.node9/ was not deleted."));
       }
     } else {
-      console.log(import_chalk20.default.blue("\n  \u2139\uFE0F  ~/.node9/ not found \u2014 nothing to delete"));
+      console.log(import_chalk24.default.blue("\n  \u2139\uFE0F  ~/.node9/ not found \u2014 nothing to delete"));
     }
   } else {
     console.log(
-      import_chalk20.default.gray("\n  ~/.node9/ kept \u2014 run with --purge to delete config and audit log")
+      import_chalk24.default.gray("\n  ~/.node9/ kept \u2014 run with --purge to delete config and audit log")
     );
   }
   if (teardownFailed) {
-    console.error(import_chalk20.default.red("\n  \u26A0\uFE0F  Some hooks could not be removed \u2014 see errors above."));
+    console.error(import_chalk24.default.red("\n  \u26A0\uFE0F  Some hooks could not be removed \u2014 see errors above."));
     process.exit(1);
   }
-  console.log(import_chalk20.default.green.bold("\n\u{1F6E1}\uFE0F  Node9 removed. Run: npm uninstall -g @node9/proxy"));
-  console.log(import_chalk20.default.gray("   Restart any open AI agent sessions for changes to take effect.\n"));
+  console.log(import_chalk24.default.green.bold("\n\u{1F6E1}\uFE0F  Node9 removed. Run: npm uninstall -g @node9/proxy"));
+  console.log(import_chalk24.default.gray("   Restart any open AI agent sessions for changes to take effect.\n"));
 });
 registerDoctorCommand(program, version);
 program.command("explain").description(
@@ -12700,7 +14481,7 @@ program.command("explain").description(
       try {
         args = JSON.parse(trimmed);
       } catch {
-        console.error(import_chalk20.default.red(`
+        console.error(import_chalk24.default.red(`
 \u274C Invalid JSON: ${trimmed}
 `));
         process.exit(1);
@@ -12711,54 +14492,54 @@ program.command("explain").description(
   }
   const result = await explainPolicy(tool, args);
   console.log("");
-  console.log(import_chalk20.default.cyan.bold("\u{1F6E1}\uFE0F  Node9 Explain"));
+  console.log(import_chalk24.default.cyan.bold("\u{1F6E1}\uFE0F  Node9 Explain"));
   console.log("");
-  console.log(`   ${import_chalk20.default.bold("Tool:")}    ${import_chalk20.default.white(result.tool)}`);
+  console.log(`   ${import_chalk24.default.bold("Tool:")}    ${import_chalk24.default.white(result.tool)}`);
   if (argsRaw) {
-    const preview = argsRaw.length > 80 ? argsRaw.slice(0, 77) + "\u2026" : argsRaw;
-    console.log(`   ${import_chalk20.default.bold("Input:")}   ${import_chalk20.default.gray(preview)}`);
+    const preview2 = argsRaw.length > 80 ? argsRaw.slice(0, 77) + "\u2026" : argsRaw;
+    console.log(`   ${import_chalk24.default.bold("Input:")}   ${import_chalk24.default.gray(preview2)}`);
   }
   console.log("");
-  console.log(import_chalk20.default.bold("Config Sources (Waterfall):"));
+  console.log(import_chalk24.default.bold("Config Sources (Waterfall):"));
   for (const tier of result.waterfall) {
-    const num2 = import_chalk20.default.gray(`  ${tier.tier}.`);
+    const num3 = import_chalk24.default.gray(`  ${tier.tier}.`);
     const label = tier.label.padEnd(16);
     let statusStr;
     if (tier.tier === 1) {
-      statusStr = import_chalk20.default.gray(tier.note ?? "");
+      statusStr = import_chalk24.default.gray(tier.note ?? "");
     } else if (tier.status === "active") {
-      const loc = tier.path ? import_chalk20.default.gray(tier.path) : "";
-      const note = tier.note ? import_chalk20.default.gray(`(${tier.note})`) : "";
-      statusStr = import_chalk20.default.green("\u2713 active") + (loc ? "  " + loc : "") + (note ? "  " + note : "");
+      const loc = tier.path ? import_chalk24.default.gray(tier.path) : "";
+      const note = tier.note ? import_chalk24.default.gray(`(${tier.note})`) : "";
+      statusStr = import_chalk24.default.green("\u2713 active") + (loc ? "  " + loc : "") + (note ? "  " + note : "");
     } else {
-      statusStr = import_chalk20.default.gray("\u25CB " + (tier.note ?? "not found"));
+      statusStr = import_chalk24.default.gray("\u25CB " + (tier.note ?? "not found"));
     }
-    console.log(`${num2} ${import_chalk20.default.white(label)} ${statusStr}`);
+    console.log(`${num3} ${import_chalk24.default.white(label)} ${statusStr}`);
   }
   console.log("");
-  console.log(import_chalk20.default.bold("Policy Evaluation:"));
+  console.log(import_chalk24.default.bold("Policy Evaluation:"));
   for (const step of result.steps) {
     const isFinal = step.isFinal;
     let icon;
-    if (step.outcome === "allow") icon = import_chalk20.default.green("  \u2705");
-    else if (step.outcome === "review") icon = import_chalk20.default.red("  \u{1F534}");
-    else if (step.outcome === "skip") icon = import_chalk20.default.gray("  \u2500 ");
-    else icon = import_chalk20.default.gray("  \u25CB ");
+    if (step.outcome === "allow") icon = import_chalk24.default.green("  \u2705");
+    else if (step.outcome === "review") icon = import_chalk24.default.red("  \u{1F534}");
+    else if (step.outcome === "skip") icon = import_chalk24.default.gray("  \u2500 ");
+    else icon = import_chalk24.default.gray("  \u25CB ");
     const name = step.name.padEnd(18);
-    const nameStr = isFinal ? import_chalk20.default.white.bold(name) : import_chalk20.default.white(name);
-    const detail = isFinal ? import_chalk20.default.white(step.detail) : import_chalk20.default.gray(step.detail);
-    const arrow = isFinal ? import_chalk20.default.yellow("  \u2190 STOP") : "";
+    const nameStr = isFinal ? import_chalk24.default.white.bold(name) : import_chalk24.default.white(name);
+    const detail = isFinal ? import_chalk24.default.white(step.detail) : import_chalk24.default.gray(step.detail);
+    const arrow = isFinal ? import_chalk24.default.yellow("  \u2190 STOP") : "";
     console.log(`${icon} ${nameStr} ${detail}${arrow}`);
   }
   console.log("");
   if (result.decision === "allow") {
-    console.log(import_chalk20.default.green.bold("  Decision: \u2705 ALLOW") + import_chalk20.default.gray("  \u2014 no approval needed"));
+    console.log(import_chalk24.default.green.bold("  Decision: \u2705 ALLOW") + import_chalk24.default.gray("  \u2014 no approval needed"));
   } else {
     console.log(
-      import_chalk20.default.red.bold("  Decision: \u{1F534} REVIEW") + import_chalk20.default.gray("  \u2014 human approval required")
+      import_chalk24.default.red.bold("  Decision: \u{1F534} REVIEW") + import_chalk24.default.gray("  \u2014 human approval required")
     );
     if (result.blockedByLabel) {
-      console.log(import_chalk20.default.gray(`  Reason:   ${result.blockedByLabel}`));
+      console.log(import_chalk24.default.gray(`  Reason:   ${result.blockedByLabel}`));
     }
   }
   console.log("");
@@ -12773,7 +14554,7 @@ program.command("tail").description("Stream live agent activity to the terminal"
   try {
     await startTail2(options);
   } catch (err2) {
-    console.error(import_chalk20.default.red(`\u274C ${err2 instanceof Error ? err2.message : String(err2)}`));
+    console.error(import_chalk24.default.red(`\u274C ${err2 instanceof Error ? err2.message : String(err2)}`));
     process.exit(1);
   }
 });
@@ -12805,14 +14586,14 @@ Claude Code spawns this command every ~300ms and writes a JSON payload to stdin.
 Run "node9 addto claude" to register it as the statusLine.`
 ).argument("[subcommand]", 'Optional: "debug on" / "debug off" to toggle stdin logging').argument("[state]", 'on|off \u2014 used with "debug" subcommand').action(async (subcommand, state) => {
   if (subcommand === "debug") {
-    const flagFile = import_path34.default.join(import_os27.default.homedir(), ".node9", "hud-debug");
+    const flagFile = import_path38.default.join(import_os31.default.homedir(), ".node9", "hud-debug");
     if (state === "on") {
-      import_fs31.default.mkdirSync(import_path34.default.dirname(flagFile), { recursive: true });
-      import_fs31.default.writeFileSync(flagFile, "");
+      import_fs35.default.mkdirSync(import_path38.default.dirname(flagFile), { recursive: true });
+      import_fs35.default.writeFileSync(flagFile, "");
       console.log("HUD debug logging enabled \u2192 ~/.node9/hud-debug.log");
       console.log("Tail it with: tail -f ~/.node9/hud-debug.log");
     } else if (state === "off") {
-      if (import_fs31.default.existsSync(flagFile)) import_fs31.default.unlinkSync(flagFile);
+      if (import_fs35.default.existsSync(flagFile)) import_fs35.default.unlinkSync(flagFile);
       console.log("HUD debug logging disabled.");
     } else {
       console.error("Usage: node9 hud debug on|off");
@@ -12827,7 +14608,7 @@ program.command("pause").description("Temporarily disable Node9 protection for a
   const ms = parseDuration(options.duration);
   if (ms === null) {
     console.error(
-      import_chalk20.default.red(`
+      import_chalk24.default.red(`
 \u274C  Invalid duration: "${options.duration}". Use format like 15m, 1h, 30s.
 `)
     );
@@ -12835,20 +14616,20 @@ program.command("pause").description("Temporarily disable Node9 protection for a
   }
   pauseNode9(ms, options.duration);
   const expiresAt = new Date(Date.now() + ms).toLocaleTimeString();
-  console.log(import_chalk20.default.yellow(`
+  console.log(import_chalk24.default.yellow(`
 \u23F8  Node9 paused until ${expiresAt}`));
-  console.log(import_chalk20.default.gray(`   All tool calls will be allowed without review.`));
-  console.log(import_chalk20.default.gray(`   Run "node9 resume" to re-enable early.
+  console.log(import_chalk24.default.gray(`   All tool calls will be allowed without review.`));
+  console.log(import_chalk24.default.gray(`   Run "node9 resume" to re-enable early.
 `));
 });
 program.command("resume").description("Re-enable Node9 protection immediately").action(() => {
   const { paused } = checkPause();
   if (!paused) {
-    console.log(import_chalk20.default.gray("\nNode9 is already active \u2014 nothing to resume.\n"));
+    console.log(import_chalk24.default.gray("\nNode9 is already active \u2014 nothing to resume.\n"));
     return;
   }
   resumeNode9();
-  console.log(import_chalk20.default.green("\n\u25B6  Node9 resumed \u2014 protection is active.\n"));
+  console.log(import_chalk24.default.green("\n\u25B6  Node9 resumed \u2014 protection is active.\n"));
 });
 var HOOK_BASED_AGENTS = {
   claude: "claude",
@@ -12861,15 +14642,15 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
     if (HOOK_BASED_AGENTS[firstArg2] !== void 0) {
       const target = HOOK_BASED_AGENTS[firstArg2];
       console.error(
-        import_chalk20.default.yellow(`
+        import_chalk24.default.yellow(`
 \u26A0\uFE0F  Node9 proxy mode does not support "${target}" directly.`)
       );
-      console.error(import_chalk20.default.white(`
+      console.error(import_chalk24.default.white(`
    "${target}" uses its own hook system. Use:`));
       console.error(
-        import_chalk20.default.green(`     node9 addto ${target}   `) + import_chalk20.default.gray("# one-time setup")
+        import_chalk24.default.green(`     node9 addto ${target}   `) + import_chalk24.default.gray("# one-time setup")
       );
-      console.error(import_chalk20.default.green(`     ${target}              `) + import_chalk20.default.gray("# run normally"));
+      console.error(import_chalk24.default.green(`     ${target}              `) + import_chalk24.default.gray("# run normally"));
       process.exit(1);
     }
     const runArgs = firstArg2 === "shell" ? commandArgs.slice(1) : commandArgs;
@@ -12886,7 +14667,7 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
       }
     );
     if (result.noApprovalMechanism && !isDaemonRunning() && !process.env.NODE9_NO_AUTO_DAEMON && getConfig().settings.autoStartDaemon) {
-      console.error(import_chalk20.default.cyan("\n\u{1F6E1}\uFE0F  Node9: Starting approval daemon automatically..."));
+      console.error(import_chalk24.default.cyan("\n\u{1F6E1}\uFE0F  Node9: Starting approval daemon automatically..."));
       const daemonReady = await autoStartDaemonAndWait();
       if (daemonReady) result = await authorizeHeadless("shell", { command: fullCommand });
     }
@@ -12899,12 +14680,12 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
     }
     if (!result.approved) {
       console.error(
-        import_chalk20.default.red(`
+        import_chalk24.default.red(`
 \u274C Node9 Blocked: ${result.reason || "Dangerous command detected."}`)
       );
       process.exit(1);
     }
-    console.error(import_chalk20.default.green("\n\u2705 Approved \u2014 running command...\n"));
+    console.error(import_chalk24.default.green("\n\u2705 Approved \u2014 running command...\n"));
     await runProxy(fullCommand);
   } else {
     program.help();
@@ -12914,14 +14695,18 @@ registerUndoCommand(program);
 registerShieldCommand(program);
 registerConfigShowCommand(program);
 registerTrustCommand(program);
+registerSyncCommand(program);
+registerAgentsCommand(program);
+registerScanCommand(program);
+registerSessionsCommand(program);
 if (process.argv[2] !== "daemon") {
   process.on("unhandledRejection", (reason) => {
     const isCheckHook = process.argv[2] === "check";
     if (isCheckHook) {
       if (process.env.NODE9_DEBUG === "1" || getConfig().settings.enableHookLogDebug) {
-        const logPath = import_path34.default.join(import_os27.default.homedir(), ".node9", "hook-debug.log");
+        const logPath = import_path38.default.join(import_os31.default.homedir(), ".node9", "hook-debug.log");
         const msg = reason instanceof Error ? reason.message : String(reason);
-        import_fs31.default.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] UNHANDLED: ${msg}
+        import_fs35.default.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] UNHANDLED: ${msg}
 `);
       }
       process.exit(0);